The Settlement
On August 17, 2026, the Federal Trade Commission announced that online bill payment firm Doxo will pay $2.1 million to resolve allegations that the company and two of its co-founders — Steve Shivers and Roger Parks — used misleading search advertising to impersonate consumers’ billers, and then charged them fees they were never clearly told about.
The complaint dates to 2024. The settlement closes a two-year case whose central allegation is unusually clean: Doxo bought the position at the top of the search results for utility companies, lenders, and municipal services, and let consumers assume that position meant what it appears to mean.
According to the FTC, Doxo had no relationship with the overwhelming majority of the companies it presented as part of its payment network.
What the FTC Alleged
Impersonating the official payment channel. The FTC alleges Doxo used search ads and other advertising to trick consumers into believing its third-party platform was the official way to pay a specific bill — utility bills, car loans, and others. A consumer searching for their electricity provider’s payment page saw a result that looked like the destination they wanted.
Undisclosed “delivery fees.” Payments made through the platform carried additional charges that the FTC says were not clearly disclosed. The consumer believed they were paying a bill; they were paying a bill plus a margin, collected by a company their biller had never heard of.
Deceptive recurring enrolment. The FTC alleges Doxo also signed consumers up for a recurring subscription programme without their clear consent — the same negative-option pattern the agency has been pursuing across industries.
The 2024 complaint framed these together as a scheme that “misled consumers” and “tacked on millions in junk fees.”
Why This Case Matters More Than $2.1 Million
The dollar figure is small. The mechanism is not.
Bill payment intermediaries occupy a genuinely awkward position. A legitimate aggregator can offer real convenience — one dashboard for many billers, reminders, a single payment method. Doxo’s business existed in that space, which is what makes the case instructive rather than merely another fraud story. The deception was not the service. It was the framing at the moment of acquisition.
Consumers who search for “pay [utility] bill” are not shopping. They are trying to complete a known transaction with a known counterparty. They have no reason to evaluate the result they click, because they believe they already know who they are dealing with. That is the moment paid search converts into impersonation — not by lying in the ad copy, necessarily, but by occupying the position where the official answer is expected to be.
There are second-order harms that money does not fix. When payment is routed through an unaffiliated third party, the biller does not always receive it on time, or in a form their system recognises. Consumers in these situations have reported late fees, service disconnections, and delinquency marks for bills they believed they had paid — because the intermediary held or delayed the transfer, or the biller had no arrangement to receive it.
The Week Search Advertising Went on Trial
Doxo is the second FTC action in a single week turning on paid search as the delivery mechanism for consumer harm.
Days earlier, a federal court temporarily halted Credit Glory, a network of 17 companies the FTC says took nearly $200 million through illegal upfront credit repair fees — using paid search advertising that in some cases specifically targeted military servicemembers with debts to AAFES and USAA.
Two very different sectors. One identical strategy: buy the moment of search intent, and let the placement do the work that a legitimate relationship would otherwise have to earn.
The FTC’s consumer education arm published a companion alert the same week — “Searching Online: Bill Pay Impersonators” — which is a useful signal in itself. The agency is not treating this as an isolated corporate misstep. It is treating it as a category.
The Broader Pattern: Impersonation Without a Lie
The most durable version of impersonation fraud has moved past forged logos and misspelled domains. What Doxo and Credit Glory illustrate is a subtler form: occupy a position of implied authority and let the consumer’s assumptions do the rest.
Search results are the clearest example, but the same structure appears elsewhere:
- App store listings that rank above the official app for a bank or government service.
- Sponsored results for customer support phone numbers.
- “Official-looking” third parties for passport renewals, DMV appointments, ESTA and visa applications, and TSA PreCheck — all services with a free or low-cost government channel and a thriving ecosystem of markup intermediaries.
Some of these are legal. Some are not. From the consumer’s side, the distinction is nearly invisible at the moment of clicking — which is precisely why the defence has to be procedural rather than perceptual.
Protecting Yourself
Never reach a biller through a search result. Pay from the account statement, the biller’s app, or a bookmark you created yourself. The URL on your paper or PDF bill is the authoritative one — type it or save it, and never search for it again.
Check the domain before entering a card or bank number. Your electricity provider’s payment page lives on your electricity provider’s domain. If the address bar shows an aggregator, a marketing domain, or anything unfamiliar, stop and go back to the statement.
Look for a fee — and read what it is called. Legitimate billers disclose convenience fees plainly, usually before you enter payment details. A “delivery fee,” “processing fee,” or “service fee” that appears late in the flow, or only on a confirmation screen, is the pattern the FTC just penalised.
Confirm the payment landed with the biller, not the intermediary. A confirmation email from a payment platform is not proof your utility was paid. Check your account balance on the biller’s own site a few days later. This is the step that prevents a “paid” bill from becoming a disconnection notice.
Watch for recurring charges you did not knowingly authorise. Review card and bank statements for small monthly charges from companies you do not recognise. Negative-option enrolment is designed to be forgettable.
Use the government’s own channel for government services. Passports, DMV, immigration forms, tax filing, and Social Security all have free or fixed-fee official channels. If a site charges a premium to submit a form you can submit yourself, that is the entire business model.
Dispute promptly and report it. Undisclosed fees are chargeable through your card issuer. File a complaint at ReportFraud.ftc.gov — this case began as consumer complaints, and the redress and conduct terms exist because people filed them.
The workable rule is short: the top of a search page is inventory, not an index. Anyone can buy it, including someone with no relationship to the company you were looking for.



