FTC Sends $52.5M in December 2025 Refunds—Over 1.3 Million People Getting Paid for CBD Scams, Avast Privacy Violations, and CafePress Data Breach
The FTC is distributing over $52.5 million in refunds to more than 1.3 million consumers in December 2025 across three major cases: $27.6 million to victims of CBD and keto product billing scams (Botanical Farms, Bliss Brands, Optimal MaxKeto, Supreme CBD, Truly Keto), $15.3 million to Avast antivirus customers whose browsing data was sold without consent, and additional Zelle payments to CafePress users affected by a 2019 data breach. Payments are being issued via check, PayPal, and Zelle between December 2-18, 2025, with no claim forms required for most recipients.
Check your mailbox. Check your inbox. Over a million Americans are receiving refund checks this month—and you might be one of them.
December 2025 marks one of the FTC’s largest refund distributions in recent history, with payments hitting mailboxes and bank accounts across the country. These aren’t lottery winnings or government handouts. They’re your money, being returned after companies scammed you.
The Big Three: Which FTC Cases Are Paying Out in December 2025
The FTC is sending refunds from three major enforcement actions this month. Here’s what each case involved and who’s getting paid.
1. $27.6 Million: The CBD and Keto “Free Gift” Billing Scam
Who’s Getting Paid: 1,215,337 consumers who bought products from Botanical Farms, Bliss Brands, Optimal MaxKeto, Supreme CBD, and Truly Keto
What Happened: According to the FTC’s July 2024 complaint, these companies ran two types of unauthorized billing scams that devastated consumers.
In the first scheme, consumers thought they were buying CBD and keto products at low advertised prices. Instead, they were charged more than advertised and secretly enrolled in continuity plans where they were shipped and charged repeatedly for products they never agreed to buy.
The second scheme was even more deceptive: Consumers paid a small shipping fee for a supposedly “free gift.” After they entered their credit card information to cover the shipping, they were enrolled in auto-renewing subscription plans without their knowledge or consent.
Sound familiar? The FTC alleged defendants Legion Media, KP Commerce, Pinnacle Payments, and Sloan Health Products operated these scams, promising products that would promote weight loss, clear skin, pain relief, and other health benefits.
Payment Details: Checks and PayPal payments are being sent between December 9-18, 2025. Check recipients must cash within 90 days. PayPal recipients must redeem within 30 days.
Average Payment: Approximately $23 per person (total $27.6M divided by 1.2M+ recipients)
Similar to other deceptive marketing cases like the L’Oreal free gift email lawsuit, consumers were lured by false promises and hit with hidden charges.
2. $15.3 Million: Avast Sold Your Browsing Data
Who’s Getting Paid: 103,152 consumers who purchased Avast antivirus software and filed valid claims
What Happened: In February 2024, the FTC alleged that Avast used its browser extensions and antivirus software to collect, store, and sell consumers’ browsing information without adequate notice and without consent.
Here’s the kicker: Avast marketed itself as privacy protection software. The company claimed it would protect consumers by blocking third-party tracking. But according to the FTC, Avast failed to adequately inform consumers that it would then turn around and sell their detailed, re-identifiable browsing data for advertising purposes.
Think about that. You paid for software to protect your privacy, and that software sold your private browsing history.
Settlement Terms: As part of the June 2024 settlement, Avast is prohibited from selling or licensing web browsing data for advertising purposes going forward.
Payment Details: Checks, PayPal, and Zelle payments sent starting December 2, 2025, to consumers who filed valid claims on time.
Average Payment: Approximately $148 per person (total $15.3M divided by 103,152 recipients)
Related article: $3M Regence BlueShield Hearing Aid Settlement On his Class Action Lawsuit, Washington Consumers Finally Getting Paid After Decade-Long Coverage Denial
3. CafePress Data Breach: Final Zelle Payments
Who’s Getting Paid: CafePress users who filed valid claims but didn’t cash previous checks or PayPal payments sent in September 2024
What Happened: CafePress suffered a major data breach and, according to the FTC settlement, failed to use reasonable data security measures, misled users about its data security practices, and failed to share important information about the breach after it occurred.
The FTC previously sent more than $347,000 in checks and PayPal payments in September 2024. Users who didn’t cash those payments are now receiving Zelle payments directly deposited into their bank accounts.
Payment Details: Zelle payments with automatic direct deposit, with a note about the settlement
How FTC Refunds Actually Work—What You Need to Know
If you’re eligible for an FTC refund, the process is usually straightforward. But understanding how it works can help you avoid scams and make sure you get your money.
Automatic Payments vs. Claims Required
For the CBD/keto scam and CafePress cases, the FTC sent payments automatically to affected consumers. You didn’t need to file a claim if the FTC had your contact information from the original complaint or settlement records.
For Avast, consumers needed to file claims on time to be eligible. That claim period has closed.
Payment Methods
The FTC uses multiple payment methods:
- Checks: Most common. Must be cashed within 90 days.
- PayPal: Must be redeemed within 30 days.
- Zelle: Direct deposit to your bank account.
- Prepaid debit cards: Used in some cases (not December 2025 distributions).
The Settlement Administrator
The FTC uses third-party companies called settlement administrators to handle refund distribution. For the December 2025 payments, Rust Consulting is the administrator.
Contact for questions: 866-914-9330 or 866-290-0165 (depending on which case)
Red Flags: How to Spot FTC Refund Scams
Here’s the truth: Scammers know the FTC is sending money, and they’re trying to steal it before you get it.
The FTC will NEVER:
- Demand money to receive your refund
- Ask for account information or passwords
- Make threats or pressure you
- Tell you to transfer money
- Promise you a prize in exchange for payment
- Call or email asking you to verify personal information
Legitimate FTC refunds:
- Arrive as checks in the mail or direct payments
- Come from known settlement administrators
- Include clear information about the case
- Don’t require you to pay anything
- Don’t ask for sensitive information
If someone contacts you claiming to be from the FTC and asks for money or personal information, it’s a scam. Report it at ReportFraud.ftc.gov.
What to Do If You Receive an FTC Refund Check
You got a check in the mail from an FTC settlement. Now what?
Step 1: Verify it’s legitimate. Check the FTC’s official refunds page at FTC.gov/enforcement/refunds to confirm the case is real.
Step 2: Cash it quickly. You typically have 90 days for checks, 30 days for PayPal. Don’t wait—expired payments can’t be reissued in many cases.
Step 3: Keep records. Save the check stub and any documentation. You may need it for taxes (though most FTC refunds for fraud losses aren’t taxable).
Step 4: Watch for additional settlements. If you were affected by one scam, you might be eligible for others.
For more active settlements you might qualify for, check our guide to class action settlements in 2026.
The Bigger Picture: What December 2025 Refunds Tell Us About Consumer Protection
In 2024, FTC actions led to more than $339 million in refunds to consumers across the country. December 2025’s $52.5 million distribution represents about 15% of annual refunds in just one month.
These cases reveal troubling patterns in how companies exploit consumers:
“Free Gift” Billing Scams Are Rampant: The CBD/keto case mirrors dozens of similar schemes where companies use tiny shipping fees to capture credit card information, then hit consumers with unauthorized recurring charges.
Privacy Protection Companies Violate Privacy: Avast’s alleged behavior—selling browsing data while marketing privacy protection—represents a particularly cynical form of consumer deception.
Data Breaches Have Long Tails: CafePress payments in December 2025 stem from a 2019 breach, showing how long it takes for consumers to receive compensation after security failures.
Beyond December: Other Major FTC Refunds Coming Soon
December 2025 isn’t the only month with FTC refund action. Several major cases are in various stages of payment distribution:
CarShield: $9.6 million to 168,000 consumers for deceptive vehicle service contract advertising. Payments issued in December 2025.
Instacart: $60 million settlement announced December 18, 2025, for allegedly engaging in unlawful practices. Payment timeline not yet announced.
Amazon Prime: $2.5 billion settlement with payments expected in late 2026 for consumers tricked into Prime memberships or prevented from canceling. Up to $51 per eligible consumer.
Frequently Asked Questions
Q: How do I know if I’m getting an FTC refund in December 2025?
A: If you’re eligible for the CBD/keto scam or CafePress refunds, you’ll receive payment automatically. For Avast, only consumers who filed valid claims are receiving payments. Check your mail and email for official notifications.
Q: Do I need to file a claim to get December 2025 FTC refunds?
A: No. The claim periods for these cases have closed. Payments are being sent automatically to eligible consumers based on FTC records and previous claim submissions.
Q: How much money will I receive?
A: Payment amounts vary by case. CBD/keto scam victims are receiving an average of $23. Avast claimants are receiving an average of $148. Individual amounts depend on your specific circumstances and losses.
Q: How long do I have to cash my FTC refund check?
A: FTC refund checks typically must be cashed within 90 days of issuance. PayPal payments must be redeemed within 30 days. Don’t delay—expired payments often can’t be reissued.
Q: Are FTC refunds taxable?
A: Generally, FTC refunds for fraud losses or deceptive practices are not taxable income because they represent a return of money you already spent. Consult a tax professional for your specific situation.
Q: What if I didn’t receive a refund but think I should have?
A: Contact the settlement administrator (Rust Consulting) at the numbers provided on FTC.gov. Have documentation of your purchases or affected accounts ready.
Q: Can the FTC help me get money back from other scams?
A: The FTC can only issue refunds for cases where they took enforcement action and secured settlements or judgments. Report other scams at ReportFraud.ftc.gov to help the FTC identify patterns and take future action.
Q: How long does it take for FTC refunds to arrive after a settlement?
A: It varies widely. The FTC cannot send payments until legal action is complete and funds are collected from defendants. This can take months or years after the initial complaint.
Q: What happens to unclaimed FTC refunds?
A: Unclaimed refunds may be redistributed to other class members, paid to the U.S. Treasury, or used for other consumer protection purposes, depending on court orders and settlement terms.
Q: Where can I check if there are other FTC refunds I might qualify for?
A: Visit FTC.gov/enforcement/refunds for the complete list of active refund programs. The FTC updates this page regularly with new cases and payment information.
How to Protect Yourself From Future Scams
Getting an FTC refund means you were already victimized once. Here’s how to avoid being scammed again:
For “Free Gift” Offers: If you’re paying anything—even shipping—it’s not free. Read the fine print. Look for pre-checked boxes enrolling you in subscriptions.
For Privacy Software: Research independently before trusting a company with your data. Read privacy policies. Look for independent security audits.
For Online Purchases: Use credit cards (not debit) for better fraud protection. Monitor your statements. Dispute unauthorized charges immediately.
General Rules: If it sounds too good to be true, it is. Legitimate businesses don’t pressure you. Free trials that require credit cards often aren’t free.
The Bottom Line: Check Your Mail and Cash Your Check
Over 1.3 million Americans are receiving FTC refund payments in December 2025. The money represents years of enforcement work, legal proceedings, and settlement negotiations.
If you bought CBD or keto products from the companies listed, used Avast antivirus software, or were affected by the CafePress data breach, watch your mail and email.
Don’t ignore checks or emails that look legitimate. Verify them against FTC.gov, then cash them quickly within the required timeframes.
This is your money. The companies took it illegally. The FTC fought to get it back. Now you need to claim it.
Settlement Administrator Contact: Rust Consulting, Inc. Phone: 1-866-914-9330 or 1-866-290-0165 (Hours and specific case information available on FTC.gov)
This article is for informational purposes only and does not constitute legal or financial advice. FTC refund amounts and eligibility are determined by the settlement administrator based on official records. Information based on FTC press releases, official FTC.gov announcements, and reputable consumer protection news sources as of January 2026.
About the Author
Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah