Official CFPB database of consumer financial product and service complaints, with browser exploration, exports, and API access.
Consumer Protection Enforcement
Accountability file
A public-record case file for tracking data-broker, privacy, consumer-finance, civil enforcement, complaint-data, retail-fraud, recall, breach, communications-enforcement, and healthcare-transparency source lanes. It treats enforcement actions, warning letters, complaint databases, recall records, breach lists, and investor-protection programs as separate public records rather than proof that any named company or person committed misconduct outside the cited record.
- Updated
- Jul 18, 2026
- Source Anchors
- 28 verified · 254 leads
- Timeline
- 20 events
- Roles
- 10 public-record
- Fingerprint
0A13 726E B5F8
How the public record connects
This shows the case file's most significant public-record connections only — see the Role Web and Timeline tabs for the full set. A line means a record connects two points; it is not a finding about conduct.
Publishing limits
These are the standards every anchor on this file must clear.
- Minimum source tier
- official record
- civil enforcement record
- state enforcement record
- public record repository
- coverage index
- Living people
- For living people, publish only source-backed roles, legal posture, and exact record relationships; do not infer intent or liability.
- Victim protection
- Do not expose private consumer narratives, account details, medical/financial identifiers, precise location data, or personal complaint details unless an official record makes narrow quotation necessary.
- Social leads
- Social posts can point to a source queue, but consumer-protection claims require official agency, court, complaint-data, or enforcement records.
No guilt by proximity
A company, adviser, broker, lender, platform, or data broker appearing in a complaint database, warning letter, or enforcement index is a public-record relationship only.
People, institutions, and the records between them
Every public-record role in this file, grouped by kind. Open a role to read its dossier — its public-record status, what it is, and the exact records that name it. A shared record naming two roles is not a finding about conduct beyond that record.
Every public-record role
Pick a role to see its public-record status, what it is, and the exact records that name it. A shared record is not a finding about conduct.
No single record names more than one role in this file yet.
Official CFPB enforcement-action portal with court documents and related materials for Bureau actions.
CMS Open Payments data portal and API for publicly accessible payment, ownership, and transfer-of-value records reported by drug and medical-device companies.
CPSC page documenting REST access to machine-readable recall data for publicly available product recall information visible on cpsc.gov.
DOJ record announcing coordinated non-prosecution agreements with Alibaba and AUS Merchant Services that resolve defined FDCA-related marketplace and payment-processing conduct with $600 million in combined penalties and forfeitures.
Official DOJ Civil Division press-room index for enforcement, fraud, consumer, and civil-action public records.
Timeline
- records release review / official#FTC warns data brokers about PADFAA obligationsFTC publishes a data-broker warning-letter announcement tied to PADFAA compliance and sensitive data about Americans.Warning letters are compliance records and do not prove any recipient violated the law.
- civil settlement / official#FTC announces proposed Kochava location-data orderFTC announces a proposed order resolving litigation over alleged sale and disclosure of sensitive location data.Use settlement and allegation language exactly; do not generalize beyond the proposed order record.
- records release review / official#CFPB withdraws confidence in complaint-portal aggregatesCFPB said it could not rely on its consumer complaint portal as a reliable reflection of market conditions or consumer experiences without correcting volume distortion, inconsistent response coding, identity controls, and workflow problems. The notice makes that limitation govern every aggregate Hugin derives from the database.This is the issuing agency's statement about the reliability of its own dataset, not a finding against a credit bureau, credit-repair organization, technology provider, influencer, or consumer.
- civil settlement / official#Court enters the stipulated Kochava location-data orderThe District of Idaho entered the FTC and defendants' stipulated order, replacing the May proposal with enforceable obligations governing sensitive-location data, supplier review, deletion, notices, and compliance. The defendants neither admit nor deny the complaint's allegations except as the order states.An entered stipulated order creates enforceable obligations but is a negotiated resolution, not a judicial finding that the complaint's allegations were proven.
- case disposition / official#DOJ and Alibaba execute a three-year non-prosecution agreementThe Justice Department and Alibaba executed a three-year non-prosecution agreement covering defined misdemeanor FDCA exposure and marketplace conduct. The agreement records a $125 million criminal monetary penalty, $200 million in civil forfeiture, compliance obligations, and a statement of facts limited to Alibaba.A non-prosecution agreement is a negotiated resolution, not a conviction or guilty plea, and its statement of facts must not be extended beyond the parties and conduct it names.
- case disposition / official#DOJ and AUS execute a separate non-prosecution agreementThe Justice Department and AUS Merchant Services executed a separate three-year non-prosecution agreement covering defined misdemeanor FDCA exposure arising from payment processing. It records an $85 million criminal monetary penalty, $190 million in civil forfeiture, and distinct BSA, anti-money-laundering, transaction-monitoring, reporting, and cooperation obligations.This agreement is not the Alibaba agreement and is not a conviction; its compliance obligations and admitted facts apply only to AUS and the conduct the document defines.
- records release review / official#SEC forms Retail Fraud Working GroupSEC announces a dedicated working group for fraud targeting retail investors, including offering frauds, pump-and-dump schemes, market manipulation, and customer-duty breaches.A working-group announcement is an enforcement-priority record, not a finding against any person or entity.
- public document repository / official#Hugin opens consumer-protection enforcement case deskHugin adds FTC, CFPB, DOJ, and SEC consumer-protection source lanes to a dedicated public-record case file with complaint-data and legal-posture guardrails.A case desk is source infrastructure and does not allege misconduct against any record subject.
Public sources ready to ingest
Import sources create source-run packets, document inventories, and review tokens. They do not publish accusations or graph relationships until the case-file evidence rules are satisfied.
Source anchors
FTC press release warning 13 data brokers about obligations under the Protecting Americans' Data from Foreign Adversaries Act.
Warning letters and compliance reminders are official records; they do not establish that a specific recipient violated the law without a later enforcement record.civil enforcement recordFTC Kochava sensitive location-data settlementFederal Trade CommissionFTC announced a proposed order resolving litigation over alleged sale and disclosure of sensitive location data.
Use the record as FTC civil-enforcement posture; preserve words like alleged, proposed order, settlement, and consent before summarizing.official recordEntered stipulated order in FTC v. Kochava, Inc.U.S. District Court for the District of Idaho, posted by the Federal Trade CommissionThe signed Stipulated Order for Injunction and Other Relief in FTC v. Kochava, Inc., No. 2:22-cv-00377-BLW (D. Idaho), Document 138, filed June 25, 2026. It is the operative order and supersedes the May 4, 2026 proposed order as the current posture of the matter.
This is the entered order, not the proposal, so the desk must stop labeling the Kochava resolution proposed; it remains a negotiated stipulation in which the defendants neither admit nor deny the complaint's allegations, so its provisions are enforceable obligations rather than judicial findings of fact against anyone. The FTC case page indexes this filing under June 26, 2026 while the document itself is stamped and signed June 25, 2026; cite the document's own date.public record repositoryFTC privacy and security enforcement indexFederal Trade CommissionFTC topic page collecting privacy and data-security enforcement records, including orders, settlements, and current consumer-protection updates.
Index pages are discovery tools; each enforcement record needs its own posture and document links before publication.public record repositoryCFPB Consumer Complaint DatabaseConsumer Financial Protection BureauOfficial CFPB database of consumer financial product and service complaints, with browser exploration, exports, and API access.
Complaint rows are consumer reports and response-status records; they are not adjudicated findings or statistical samples.official recordCFPB notice on consumer complaint system integrityConsumer Financial Protection BureauCFPB newsroom notice in which the Bureau states it cannot rely on its own consumer complaint portal data as a reliable reflection of market conditions or consumer experiences, and describes the credit-reporting volume distortion and response-coding inconsistency behind that position.
This is the issuing agency withdrawing confidence in a dataset the desk already cites, so it governs every aggregate built from the CFPB complaint database. It is an agency statement about data quality and planned remediation, not a finding against any consumer reporting agency, credit-repair company, influencer, technology provider, or consumer.public record repositoryCFPB Enforcement ActionsConsumer Financial Protection BureauOfficial CFPB enforcement-action portal with court documents and related materials for Bureau actions.
Enforcement rows need status labels such as pending litigation, post order, post judgment, expired, terminated, or dismissed.official recordDOJ Civil Division Press RoomU.S. Department of Justice, Civil DivisionOfficial DOJ Civil Division press-room index for enforcement, fraud, consumer, and civil-action public records.
Press-room rows are official announcement records; specific allegations, settlements, judgments, and complaint filings must stay labeled.official recordSEC Retail Fraud Working Group announcementU.S. Securities and Exchange CommissionSEC announcement creating a Retail Fraud Working Group to identify and combat fraud targeting retail investors.
A working-group announcement is a program and priority record, not an enforcement finding against any target.baselineWhat the record currently supports
Claim rows are derived from timeline events and source anchors. They are evidence-status labels, not accusations or final truth claims.
What should be released next
Release requests are lawful public-record asks. They identify source gaps, review gates, and privacy constraints; they are not evidence that a specific person committed wrongdoing.
What stays unresolved
Deliberate gaps in the public record — open until the underlying records are released or reviewed, not questions we have skipped.
- Filed
- Hugin · public social evidence reports
- License
- Text and data are shared under the terms noted at hugin.studio/support · attribution appreciated.
- Fingerprint
0A13 726E B5F8
For researchers & contributorsSource desk, research joins & machine-readable exportsEverything Hugin uses to grow and audit this file — connection detail, review posture, scout queue, and every export.
Every machine-readable slice of this file
How the public record is joined
Connections are navigation aids. They show where a record, event, or role is sourced; they do not convert association, correspondence, testimony requests, or document appearance into misconduct findings.
Scout queue before promotion
Consumer-protection desk for FTC, CFPB, DOJ, SEC, state enforcement, recall, breach, communications, healthcare transparency, complaint-data, and privacy-sensitive source review.
Source leads and automated probes are review inventory. They become verified anchors only after Hugin can attach the public record, legal posture, and no-allegation guardrails.
Public-record joins are wired into exports
These are not loose TODOs anymore. Each lane below is computed from the case file's source tiers, then joined to matching sources, timeline events, role nodes, and release-roadmap requests.
Index FTC warning letters, complaints, settlements, final orders, legal-library records, dates, respondents, and posture labels.
Join SEC working-group, litigation-release, complaint, final-judgment, and investor-alert rows with explicit legal posture.
Preserve product, company-response, publication-delay, privacy, and non-statistical-sample caveats before using complaint data.
Index payment-year, reporting entity, covered-recipient type, amount, nature of payment, ownership rows, dispute context, and API/export links.
Join Recalls.gov, CPSC, NHTSA, FDA, and openFDA rows by agency, product type, hazard, remedy, status, date, and official release URL.
Index covered entity, state, affected-count band, breach type, submission date, and business-associate status while suppressing patient details.
Block private identifiers, consumer narratives, precise location details, account data, and medical/financial identifiers from public snippets.
Index CFPB action status, respondent, product, filed date, complaint/order documents, and legal posture.
Preserve FCC document type, released date, order/notice/consent posture, proceeding number, and consumer-facing issue area.
Help grow the source queue
Hugin accepts public records, not accusations. A submitted URL lands in a review lane, gets source-validated, and only becomes a case anchor after the evidence rules and privacy gates are satisfied.
What this case can prove right now
Fact-check status is a review posture, not a verdict. Source-scout rows are leads until a reviewer joins them to publishable anchors; claim-ledger rows are timeline-derived and still require source validation plus no-allegation guardrails before promotion.
Queue a public record
Paste an official or public-record URL. Hugin classifies the lane first, keeps lead-only material quarantined, and requires source validation before anything reaches the case file.
Queue a public source for review.Latest submitted public URLs
Sanitized queue view: Hugin shows the public URL, lane, status, and why a source has not been promoted. Submitter identifiers are not shown.
Submit sources, not claims
A source is a public URL someone else can inspect. A claim is an interpretation. Hugin queues sources first and keeps claims out until a reviewed public record supports the exact wording.
Official agency pages, court dockets, congressional releases, civil records, state updates, and public repositories with source URLs.
Publisher, date, record family, and why the URL belongs in this file.
Source URLs first. Context is welcome, but claims do not publish from submissions alone.
Private tips, survivor identifiers, sealed or leaked material, graphic details, and private contact data.
Screenshots or social posts without a public source URL.
Misconduct labels for living people unless the exact cited public record supports that exact statement.
Case change ledger
Audit feed for source anchors, queue decisions, privacy-review jobs, and hashes. It explains the process without turning leads into claims.
CFPB Consumer Complaint Database
- Status
- needs human privacy review
- Evidence state
- metadata only
- Lane
- privacy triage
Extract document index and source metadata first.
Next: Metadata extraction includes publisher, URL, document family, and date.e102cf497d69CFPB Enforcement Actions
- Status
- needs human privacy review
- Evidence state
- metadata only
- Lane
- privacy triage
Extract document index and source metadata first.
Next: Metadata extraction includes publisher, URL, document family, and date.d9deaa573e71CPSC recalls API
- Status
- needs human privacy review
- Evidence state
- metadata only
- Lane
- privacy triage
Extract document index and source metadata first.
Next: Metadata extraction includes publisher, URL, document family, and date.2eb1d9f1d375FDA recalls, market withdrawals, and safety alerts
- Status
- needs human privacy review
- Evidence state
- metadata only
- Lane
- privacy triage
Extract document index and source metadata first.
Next: Metadata extraction includes publisher, URL, document family, and date.3f795374edd0FTC privacy and security enforcement index
- Status
- needs human privacy review
- Evidence state
- metadata only
- Lane
- privacy triage
Extract document index and source metadata first.
Next: Metadata extraction includes publisher, URL, document family, and date.13c635045abaNHTSA vehicle, equipment, tire, and car-seat recall search
- Status
- needs human privacy review
- Evidence state
- metadata only
- Lane
- privacy triage
Extract document index and source metadata first.
Next: Metadata extraction includes publisher, URL, document family, and date.ae328f72bb5fRecalls.gov federal recall portal
- Status
- needs human privacy review
- Evidence state
- metadata only
- Lane
- privacy triage
Extract document index and source metadata first.
Next: Metadata extraction includes publisher, URL, document family, and date.80311d6850cdSEC Litigation Releases
- Status
- needs human privacy review
- Evidence state
- metadata only
- Lane
- privacy triage
Extract document index and source metadata first.
Next: Metadata extraction includes publisher, URL, document family, and date.5898b2d3e3b7Case file hash snapshot
- Status
- hash changed when case bundle changes
- Evidence state
- metadata only
Mirrors can compare this hash to verify the same case file bundle.
Next: Compare the short hash in the UI with this machine-readable ledger.0a13726eb5f8Document manifest hash snapshot
- Status
- hash changed when document handling changes
- Evidence state
- metadata only
This binds document mirroring and privacy-triage rules.
Next: Compare the short hash in the UI with this machine-readable ledger.49462610e593