FRAUD CHECK — Squire It™
sharelivefraud.com/squire-it
LIVE FRAUD ALERT
LIVEFRAUD Check #96
FTC WARNS

The FTC alleges that ticket broker REPS & Company Inc. used other people's names, addresses and phone numbers plus virtual credit cards and IP-masking tools to bypass event ticket limits, buying 18.5 million tickets for resale at inflated prices.

MODERATE CONFIDENCEPublished 2026-10-16
S
Q
U
I
R
E
D
E
S
K
·
C
H
E
C
K
E
D
·
B
A
T
T
L
E
D
·
R
E
C
E
I
P
T
E
D
·
S

What we found

On 15 October 2026 the Federal Trade Commission announced it had sued ticket broker REPS & Company Inc. and three of its named officers, alleging the company illegally circumvents measures that limit how many tickets one buyer can purchase for a single event. According to the complaint, since 2022 REPS bought more than eight tickets for at least 83,500 events, spending more than $1.3 billion to amass more than 18.5 million tickets and generating at least $120.8 million in profit on the secondary marketplace. The complaint describes one example in which 1,300 separate accounts were used to buy 7,624 tickets to a single 2023 concert in Kansas City, Mo., producing $833,000 in profit. The FTC alleges the methods included thousands of ticket-purchasing accounts opened with names, addresses or phone numbers belonging to someone other than the actual purchaser, virtual credit card accounts and phone numbers controlled by the company, and IP proxy services and multi-session browsers that mask the account user's identity and location. The complaint also alleges the company signed agreements with employees and third-party partners authorising it to use their names and addresses to open ticket-issuer accounts, and that when issuers blocked or cancelled purchases staff made slight changes to an account holder's name or address to get around the controls. The FTC names Ticketmaster and AXS as the ticket issuers whose security measures — quantity selectors capped at the purchase limit, and checks on unique credit cards, email addresses, phone numbers and IP addresses — the complaint says were bypassed. If anyone asks to use your name, home address, phone number or email to open a ticket-buying account — even a friend, employer or side-gig offer — say no, and open ticket accounts only in your own name for tickets you intend to use. These are allegations that a court has not decided; the FTC's own notice states the Commission refers a complaint when it has reason to believe the law is being violated and that the case will be decided by the court. We do not know from this material whether any individual whose name or address was used on an account was harmed, misled about that use, or left liable for anything, and the FTC release does not say. Our harvested material contains no guidance on how a fan can tell at the point of sale whether a resale listing came from accounts of this kind, and no information on refunds or cancelled orders for buyers. LIVEFRAUD ALERTS is an independent consumer awareness publication and is not affiliated with the FTC, the Department of Justice, or any company named here; brands are named only because an official source named them. This alert was written from a single official FTC press release and cites nothing beyond it.
THE RULE
Your name, address, phone number or email can be used to open bulk ticket-buying accounts you never see, while the tickets you want sell out and come back to you at a marked-up resale price.

What we don’t know

The bench — who voted

3 INDEPENDENT AI MODELS REVIEWED THIS. ALL 3: MODERATE RISK.

The card names a count. Here are the seats behind it, with what each one said.

ANTHROPICclaude-opus-5 · MODERATE
Several concrete figures and narrative details in the finding are absent from the single evidence row supplied: 'since 2022', 'more than eight tickets for at least 83,500 events', the 1,300-account / 7,624-ticket / $833,000-profit Kansas City 2023 example, the signed agreements with employees and third-party partners, and the practice of making slight changes to a name or address after a block. The row supports only the aggregate figures (18.5m tickets, $1.3bn spend, $120.8m profit), the three named officers, and the list of circumvention methods. On the record given, those extra particulars are asserted beyond the evidence, even if they plausibly sit in the same press release.
DISSENT, PRESERVEDThe core CLAIM as written is fully carried by the evidence row; my 'overstated' verdict attaches to the expanded FINDING, not to the one-sentence claim. A panel that judged only the claim would reasonably say 'holds'.
DISSENT, PRESERVEDCredit where due: the allegation framing, the explicit statement that a court has not decided, the refusal to assert harm to named-account individuals, and the disclosure that the piece rests on one press release are all handled better than is typical for this genre. The problem is sourcing breadth, not spin.
DISSENT, PRESERVEDGrade is moderate rather than high because the direct exposure to an ordinary reader is economic (paying above face value on a secondary market) and speculative identity-lending; nothing in the supplied material shows any consumer lost tickets, money or legal standing. I would not defend a 'high' grade on this record.
GROQopenai/gpt-oss-120b · MODERATE
Finding adds specific details (announcement date, Kansas City concert example, number of events, ticket‑per‑buyer limits) that are not present in the cited evidence row, which only summarizes the overall allegations.
OPENROUTERopenrouter/free · MODERATE
Finding includes details not supported by evidence row (e.g., 83,500 events, 1,300 accounts buying 7,624 tickets, $833k profit, employee agreements, specific name/address changes, Ticketmaster/AXS security details, consumer guidance) making the claim go beyond the sourced statements.

Reviewed by 3 independent models; all judged the finding to go beyond the evidence.

▼ Protocol & challenge record
Objection (high): The risk_line — 'Your name, address, phone number or email can be used to open bulk ticket-buying accounts you never see' — is not supported by the single harvested row and is in tension with it. The release alleges REPS 'has agreements with its employees and third-party partners AUTHORIZING the company to use their names and addresses.' That is consented use by people connected to the firm, not covert harvesting of ordinary consumers' identities. The only non-consent hook is the phrase 'belonging to someone other than the ticket purchaser,' which does not establish that the name-holder was unaware. The finding itself concedes this in its limitation sentence ('We do not know... whether any individual whose name or address was used was harmed, misled about that use'). An alert cannot headline a risk its own body says is unknown. The second clause of the risk_line (tickets sell out and return at marked-up prices) IS supported by the Mufarrige quote and should carry the risk framing alone.
Not resolved — preserved on the record.
Objection (high): The advice sentence invents a solicitation vector. 'If anyone asks to use your name, home address, phone number or email to open a ticket-buying account — even a friend, employer or side-gig offer — say no.' Nothing in the row describes anyone being asked, recruited, or offered a side gig; 'friend' and 'side-gig offer' are pure construction, and the row_ids array is correctly empty, which is precisely the tell. This is the same §11 Rule 2 logic the draft applied to drop four share directives ('no harvested source describes this group'), applied inconsistently: the draft dropped 'forward to X' directives for lack of evidence but kept a behavioural instruction premised on an unevidenced recruitment pattern. Either the standard applies to advice as well or the targeting_dropped rationale is not being applied honestly.
Not resolved — preserved on the record.
Objection (medium): Entity-to-claim stretch on AXS. The draft says 'The FTC names Ticketmaster and AXS as the ticket issuers whose security measures... the complaint says were bypassed.' The row says only that 'Ticket issuers such as Ticketmaster and AXS have put in place measures' (a general illustration), and separately that REPS employees 'bypass Ticketmaster and other ticket-issuer account security measures.' AXS is named as an issuer with measures; it is never named as an issuer that was bypassed. Naming a specific commercial brand as a victim of the alleged circumvention goes beyond the source, and the draft's own disclaimer ('brands are named only because an official source named them') does not cure naming a brand in a role the source did not assign it.
Resolved: Partially resolvable by downgrading the AXS sentence to track the source: 'The release cites Ticketmaster and AXS as examples of issuers that deploy such measures, and alleges REPS bypassed Ticketmaster and other ticket-issuer security measures.' I accept this as a fix if adopted verbatim; I do not accept retaining the current formulation.
Objection (medium): 'Email' is smuggled into both the risk_line and the advice. The row lists the allegedly misappropriated identifiers as 'names, addresses or phone numbers belonging to someone other than the ticket purchaser.' Email addresses appear only on the other side of the ledger — as one of the issuer-side checks Ticketmaster/AXS run. The sourced claim sentence gets this right; the unsourced consumer-facing lines do not. Two of the three places a reader will actually act on now contain an identifier the complaint does not allege was taken.
Resolved: Resolvable by deletion: strike 'or email' from the risk_line and 'or email' from the advice sentence so both match the source's 'names, addresses or phone numbers'. No other text is affected.
Objection (medium): The legal hook is missing. The complaint's cause of action is the Better Online Ticket Sales (BOTS) Act, quoted at length in the release. The finding says 'illegally circumvents measures' without ever naming the statute, which is the single most load-bearing fact for why this conduct is alleged to be unlawful rather than merely aggressive brokering. Also omitted: the complaint was filed by DOJ on FTC referral in the U.S. District Court for the Southern District of California on a 2-0 Commission vote. The evidence row's own claim_sentence includes the DOJ filing; the published finding drops it, then carries a disclaimer about not being affiliated with 'the Department of Justice' — a body the reader is never told is involved. That is an internal inconsistency a reader can see.
Resolved: Resolvable by addition from the same row: name the Better Online Ticket Sales Act as the statute invoked, and state that DOJ filed the complaint on FTC referral in the Southern District of California on a 2-0 Commission vote. All four facts are verbatim in the row, so this adds grounding without adding sources and removes the dangling DOJ reference in the disclaimer.
Objection (low): Confidence is reported as a single 'moderate' across heterogeneous material. The enforcement facts (who was sued, when, the figures) come from a primary official release and are high-confidence as reportage of an allegation; the consumer-exposure inference underpinning the risk_line and advice is low-confidence and partly unsupported. Averaging these to 'moderate' flatters the weakest component. Confidence_reason four already identifies the problem ('the consumer-facing risk is inferred in part') but the rating does not reflect it.
Not resolved — preserved on the record.
Objection (low): Date currency cannot be self-verified from the packet: the row is stamped 2026-10-15 and the finding repeats it. If the harvest or publication clock does not actually sit on or after that date, the whole item is unverifiable; and if it does, the Desk should confirm no answer, settlement, or docket development has occurred since, because a 'court has not decided' statement decays. The draft asserts single-source sufficiency without any staleness check.
Not resolved — preserved on the record.
Objection (low): 'Buying 18.5 million tickets for resale at inflated prices' in the claim line imports 'inflated prices' from a press-office quotation by the Bureau Director, not from the complaint's allegations. The release's own narrative language is 'resells at a significant profit.' Low stakes, but quote-derived characterisation should not be presented as the pleaded allegation.
Resolved: Resolvable by attribution: change the claim line to 'resells at a significant profit' (the release's narrative wording), or keep 'inflated prices' but attribute it in-text to the FTC Bureau of Consumer Protection Director's statement.
Objection (low): Unused option sets contain items that should not have been generated at all and signal weak discipline upstream: 'ATTENTION: VETERANS' has no basis anywhere in the row, and 'Send this to any ticket-issuer you know' / 'Forward this to the ticket-issuers in your life' address corporate entities as if they were readers. None were selected, so no published harm — but if the generator is producing an audience ('VETERANS') the source never mentions, the selection step is the only thing standing between the packet and a fabricated targeting claim.
Not resolved — preserved on the record.
Objection (low): Alternative explanation not addressed: the material is equally consistent with a pure B2B regulatory action in which the named individuals are willing participants compensated for lending their identities, and in which the only consumer-side effect is price. The draft's unknowns list gestures at this but the framing (audience callout, watch icons 'person/card/phone', risk_line) presents it as an identity-misuse story. The icons in particular visually assert personal-data and payment-card exposure to the reader, which is not what the complaint alleges happened to readers.
Not resolved — preserved on the record.
Preserved dissent
ON THE RECORDI do not accept the risk_line as drafted and I want this recorded. The only passage in the single harvested source describing how third-party names were obtained says REPS 'has agreements with its employees and third-party partners authorizing the company to use their names and addresses.' That is consent, documented, from people inside or adjacent to the business. The draft converts that into 'Your name, address, phone number or email can be used to open bulk ticket-buying accounts you never see' — addressed to a general reader who has no connection to REPS. That is not a cautious reading of a thin source; it is the opposite of what the source says, aimed at a population the source never mentions. The draft knows this, because four sentences later it tells the reader 'We do not know... whether any individual whose name or address was used on an account was harmed, misled about that use, or left liable for anything.' Publishing a risk headline and a retraction of that headline in the same item is not transparency; most readers will take the headline and skip the caveat. The supported harm here is price and access: a broker allegedly hoovering up 18.5 million tickets so fans pay resale markups. That is a real, sourced, publishable consumer story. It does not need an identity-theft overlay, and the overlay is the part that is wrong.
ON THE RECORDI also dissent on the advice sentence. 'Even a friend, employer or side-gig offer' describes a recruitment pattern that appears nowhere in the harvested material. The packet simultaneously drops four share directives on the explicit ground that 'no harvested source describes this group,' then prints a behavioural warning premised on a solicitation scenario no harvested source describes either. If §11 Rule 2 means anything it has to bind advice as well as directives; applied only to the directives it looks less like a standard and more like a formality the draft satisfies in the cheap place and ignores in the expensive one.

The sources

Official sourceFTC Sues Ticket Broker Over Unlawful Tactics Used to Buy Millions of Tickets to Popular Live Events2026-10-15
The FTC announced a complaint, filed by the DOJ on its behalf, alleging REPS & Company Inc. and three named officers bypassed ticket-issuer security measures to buy 18.5 million tickets for $1.3 billion and resell them for at least $120.8 million in profit, using accounts opened with other people's names, addresses and phone numbers, virtual credit cards, IP proxies and multi-session browsers.
Authority: official. Retrieved 2026-10-16.
Limitation: All statements are allegations in a complaint that has not been tried; the release states the case will be decided by the court, gives no outcome, and says nothing about harm to the individuals whose details were used or about remedies for ticket buyers.
Open the original source →

Other checks

Every check we have published →

Share this receipt
sharelivefraud.com/check/mmYVCdo

Published under standing founder pass (A9) — every claim source-mapped by the machine.

▼ What the machine checked
  • ✓ Not a community submission.
  • ✗ Draws on an FTC enforcement release, which names a defendant: "FTC Sues Ticket Broker Over Unlawful Tactics Used to Buy Millions of Tickets to ".
  • ✓ All 7 material sentence(s) map to FTC.
  • ✗ anthropic returned "overstated"; groq returned "overstated"; openrouter returned "overstated" — published on the receipt, not blocking (A9 amendment).
  • ✓ No audience band is set.

No human affirmed these. They were verified by the classifier described in Amendment A9, on 2026-10-16.

Something wrong here? Tell us and we'll correct it — corrections are published, not quietly edited.

Phishy? Send it → sharelivefraud.com/squire-it

Not affiliated with any government agency, credit bureau, bank, platform, or law-enforcement agency. Informational only — not legal or financial advice.

Naming a source is not an endorsement, and being named here is not an accusation against any company.

Powered by SquireIt™

Verify this receipt at squireit.com

Join Squire’s First Watch

Alerts before the feed. Credit when your summons becomes a receipt. A vote on what we check next. Founding names are permanent.

Get the next one

We publish a receipt for every alert, including the ones we decide not to run.

We will ask you to confirm before anything is sent. Your address is used for this and nothing else, and is never shared.