FTC Lawsuit Exposes How Subscription Scam Networks Bypass App Store Enforcement

A $250 Million App Empire That the App Stores Never Saw Coming

If you have ever downloaded a fitness app, a PDF editor, or a horoscope tool and found yourself being charged for a subscription you never clearly agreed to, there is a decent chance the app was part of a network that regulators say ran one of the largest mobile subscription fraud operations ever prosecuted in the United States.

On June 17, 2026, the Federal Trade Commission filed a lawsuit against a company called Genesis Tech, alleging it operated a sprawling network of deceptive subscription apps that generated nearly $250 million in global revenue between early 2023 and mid-2025. The FTC also obtained a temporary court order freezing the operation while the case proceeds.

What makes this case particularly significant is not just the scale of the alleged fraud. It is the detail in which the FTC's complaint describes exactly how Genesis Tech evaded detection for years: through a rotating cast of shell companies, new developer accounts, offshore payment routing, and a product portfolio designed to look like legitimate consumer software. The lawsuit is, in effect, a technical manual for how a determined bad actor can navigate around the fraud monitoring systems that Apple and Google have built into their app stores.

Who Is Genesis Tech and What Did It Actually Build?

Genesis Tech is described in the FTC's complaint as one of Ukraine's largest app publishers. Its co-founder-CEOs are named as Vladimir Mnogoletny and Vasily Ulianov. Six other individuals are named as co-defendants: Stamatis Skianis, Oksana Kucher, Iryna Oleksyn, Olga Garbuzenko, Rostyslav Ivanitsa, and Viktoriia Savchuk. The case is being heard in the U.S. District Court for the Northern District of California.

The enterprise was structured as a network of 15 corporations, with subsidiaries incorporated in Cyprus and operating in Ukraine. Those Cyprus entities marketed directly to U.S. consumers and routed payments through counterpart companies incorporated in Delaware, giving the operation a legitimate American corporate face while keeping actual ownership and revenue flows offshore.

The apps themselves covered a deliberately broad range of everyday consumer categories:

• MadMuscles, Harna, and Unimeal (by Amoapps Limited): fitness and nutrition apps targeting health-conscious users
• PDF Guru and PDF Master (by Gurudocs Limited): productivity tools for editing and managing documents
• Lumi (by Bramol Limited): a fashion consulting and styling app
• Nebula (by Obrio Limited): a horoscope and psychic chat platform
• Wisey (by Koflimin Limited): habit tracking and personal productivity courses, with a focus on ADHD self-management

Each subsidiary carried its own branding, its own app store developer account, and its own merchant accounts for payment processing. On the surface, these looked like five separate companies operating independently. According to the FTC, they were anything but.

The Dark Pattern Playbook: How the Alleged Fraud Actually Worked

Free Trials That Were Never Really Free

The entry point for consumers was almost always a free or deeply discounted trial. Users were offered money-back guarantees and low-friction sign-up flows. The apps were designed to feel like reasonable consumer products, because they needed to pass app store review and avoid triggering immediate user complaints.

What users did not see clearly was that they were enrolling in auto-renewing subscriptions. Any mention of the subscription terms was, according to the FTC, relegated to the smallest print on the page. Once the trial period ended, billing began automatically. Some users were charged for additional products they had never requested. Others were double-billed for the same subscription. And when users tried to cancel, they found that cancellation options had been removed from both the app and the website.

"Genesis Tech and its subsidiaries work together to continually launch new deceptive product offerings, register new corporate identities and open new merchant accounts." - FTC complaint, June 2026

Making Cancellation Practically Impossible

Dark patterns in subscription apps are well-documented at this point, but the Genesis Tech complaint describes a particularly thorough version. Cancellation flows were removed from the apps themselves. Websites did not include clear pathways to stop billing. Users who discovered unauthorized charges and sought refunds faced the additional challenge of identifying which company had actually billed them, since the visible brand name often did not match the legal entity processing the payment.

Some users were charged for services after they believed they had already cancelled. The company continued billing without authorization after cancellation requests, according to the FTC's complaint. This pattern is not unique to Genesis Tech. It is precisely the behavior that the FTC's click-to-cancel rule was designed to address, a rule that was vacated by the Eighth Circuit Court of Appeals in July 2025 on procedural grounds. The FTC launched a new rulemaking process in March 2026 to revive it, but for now the agency is enforcing under older statutes: the FTC Act and the Restore Online Shoppers' Confidence Act, known as ROSCA.

How Genesis Tech Allegedly Evaded App Store Enforcement for Years

The Rotating Developer Account Strategy

Both Apple and Google operate fraud monitoring programs that track developer accounts for patterns associated with policy violations. A developer account that accumulates too many refund requests, consumer complaints, or chargebacks will eventually draw scrutiny. Genesis Tech's solution was straightforward in concept if operationally complex: never let any single account accumulate enough of a track record to trigger a review.

By continually creating new developer accounts, each tied to a different subsidiary entity with different corporate registration details, Genesis Tech was able to reset the fraud monitoring clock repeatedly. Each new account started with a clean slate. The apps launched under each account were functionally similar in their monetization approach, but the corporate identity behind them was different enough to avoid pattern matching across accounts.

This approach exploited a structural limitation in how both major app stores police their platforms. Fraud monitoring is largely account-level and behavior-based within an account. Connecting behavior across multiple accounts controlled by the same beneficial owners requires investigative work that app store operators are not set up to do at scale.

Shell Companies as Structural Camouflage

The Delaware incorporation layer served a specific function. U.S.-incorporated entities have access to U.S. payment processing networks, and they present as domestically operated businesses to app stores, payment processors, and consumers. The actual ownership and operational control sitting in Cyprus and Ukraine was not visible to these parties without significant legal discovery work.

The FTC's complaint describes a pattern of cross-border fund transfers among corporate entities designed to obscure the trail of revenue. Money generated from U.S. consumers moved through Delaware entities to Cyprus subsidiaries before reaching the ultimate beneficial owners. This structure also complicated any asset recovery effort: even if a U.S. court orders funds frozen or returned to consumers, reaching assets held in Cyprus or Ukraine requires international legal cooperation that can take years.

What the FTC Is Alleging and Under What Laws

The FTC's complaint charges Genesis Tech and its network with violations of two statutes. The first is the FTC Act itself, which prohibits unfair or deceptive acts or practices in commerce. The second is ROSCA, the Restore Online Shoppers' Confidence Act, which was passed specifically to address deceptive online subscription practices and requires clear disclosure of subscription terms, affirmative consent before charging, and a simple mechanism for cancellation.

Christopher Mufarrige, Director of the FTC's Bureau of Consumer Protection, issued a statement describing the action as part of the agency's reinvigorated anti-fraud program: "The Trump-Vance FTC is engaged in robust enforcement to address deception and illegal subscription offerings. This case illustrates the benefits and importance of the Bureau's reinvigorated anti-fraud program."

The temporary court order obtained alongside the complaint has frozen the operation pending the outcome of the case. That order gives the FTC some immediate leverage, but the jurisdictional challenge of reaching assets held overseas remains significant. The agency has experience with this problem from prior cases, but it does not always produce quick or complete recoveries for consumers.

How This Case Fits Into a Broader Pattern of FTC Enforcement

Genesis Tech is the largest and most structurally complex case in a wave of FTC enforcement actions targeting subscription app practices. The agency has investigated and settled cases involving NGL, the anonymous teen messaging app; Match, the dating app giant; Handy, the gig economy platform; HyperBeard, a children's app developer; mobile ad company Tapjoy; and data broker X-Mode. In January 2026, the FTC also sued JustAnswer, an AI-assisted expert Q&A service, over alleged subscription manipulation.

Each of those cases involved some version of the same core complaint: users were enrolled in subscriptions without clear understanding of the terms, and cancellation was made deliberately difficult. What sets Genesis Tech apart is the degree of corporate infrastructure built specifically to sustain those practices at scale while evading detection across multiple platforms and payment networks.

What This Means for App Store Accountability

The Structural Limits of Platform Enforcement

Apple and Google both have policies that prohibit apps from using dark patterns, obscuring subscription terms, or making cancellation difficult. Both platforms have improved their subscription transparency requirements over the years. Apple introduced subscription management tools that let users see and cancel all active subscriptions from a single screen. Google has made similar improvements.

And yet Genesis Tech operated across both platforms for years, generating hundreds of millions of dollars before a regulator caught it. That gap between stated policy and operational reality reflects a genuine structural problem. App stores review apps at the point of submission, but they are not well positioned to monitor ongoing business practices once an app is live. They rely heavily on user complaints to surface bad actors, and the Genesis Tech case shows how a sophisticated operator can dilute that signal by spreading complaints across multiple accounts and corporate identities.

By continually creating new developer accounts, Genesis Tech was able to avoid fraud monitoring programs for years, according to the FTC's complaint.

Beneficial Ownership as the Missing Variable

The Genesis Tech case highlights a gap in how app stores verify developer identity. When a new developer account is created, the platform typically requires a legal entity name, a tax identification number, and payment information. It does not require disclosure of the beneficial owners behind a corporate entity, meaning the actual humans who control and profit from the operation.

In the U.S., new corporate transparency requirements under the Corporate Transparency Act were designed to address this at the business registration level, but enforcement has been uneven. And even with domestic requirements in place, a network that uses Cyprus and Delaware entities as its visible face can still obscure the actual decision-makers from platform operators conducting routine verification checks.

If Apple and Google wanted to catch networks like Genesis Tech before they reach $250 million in revenue, they would need to conduct ongoing beneficial ownership analysis across their developer bases, or cooperate with financial regulators who have access to banking and corporate records that are not available to app store teams. That is a significant operational and legal undertaking.

What Affected Users Should Know Right Now

If you have used any of the apps named in the FTC complaint, MadMuscles, Harna, Unimeal, PDF Guru, PDF Master, Lumi, Nebula, or Wisey, and you believe you were charged without proper consent, there are steps worth taking.

• Check your subscription list: Both Apple and Google provide centralized subscription management screens. Review them for any active subscriptions you do not recognize or did not intentionally start.
• Review your card statements: Look for recurring charges from names you do not recognize. The billing entity name may not match the app name, which is part of what made this network difficult to identify.
• File a complaint with the FTC: The FTC's complaint portal at ReportFraud.ftc.gov accepts consumer reports. These reports feed into the agency's enforcement database and can contribute to refund programs when cases settle.
• Request a chargeback: If you were charged without authorization and the company is unresponsive, your bank or card issuer can initiate a chargeback. Document your cancellation attempts and unauthorized charges before making the request.
• Watch for refund programs: When FTC cases settle, the agency sometimes operates consumer refund programs. Following FTC news releases at ftc.gov is the most reliable way to learn if a refund program opens for Genesis Tech victims.

The Regulatory Gap That Made This Possible

The collapse of the FTC's click-to-cancel rule in July 2025 created a period of regulatory uncertainty that sophisticated operators like Genesis Tech could exploit. The rule would have required businesses to make cancellation as easy as sign-up, provide clear upfront disclosure of subscription terms, and get affirmative consent before charging. With that rule gone, enforcement reverts to the older and less specific ROSCA framework, which requires the FTC to prove deception on a case-by-case basis rather than applying a blanket standard.

The FTC's March 2026 launch of a new rulemaking process signals that the agency intends to restore some version of the click-to-cancel requirement. But rulemaking takes time. Until a new rule is finalized and survives any legal challenge, the enforcement environment for subscription fraud will remain reactive rather than preventive.

"The Genesis Tech complaint shows the FTC can still pursue subscription fraud without the click-to-cancel rule, but the broader regulatory framework for dark patterns remains unsettled." - The Next Web, June 2026

State-level enforcement is also an active front. California's Automatic Renewal Task Force has been pursuing subscription fraud cases independently. New York City's mayor signed an executive order in January 2026 directing consumer protection authorities to prioritize illegal subscription practices. These parallel enforcement tracks increase the overall pressure on bad actors, but they do not resolve the underlying coordination problem between regulators and app store operators.

The Bottom Line

The Genesis Tech case is not just a story about one bad actor. It is a demonstration of what the current app store enforcement architecture cannot catch on its own. Account-level fraud monitoring, developer identity verification, and app review processes were all in place across the platforms where Genesis Tech operated. None of them stopped a network that generated $250 million by spreading its corporate identity across 15 entities and rotating developer accounts before any single account accumulated enough of a negative track record to trigger removal.

Catching this kind of operation requires a different kind of investigation: one that connects corporate ownership records, payment flows, consumer complaint patterns, and developer account relationships in ways that go beyond what app store teams are currently equipped to do. The FTC, working with access to financial records and subpoena power, was able to do that work. App stores working in real time cannot.

The practical implication for consumers is straightforward and unchanged: treat any free trial with auto-renewal terms as a paid subscription from the moment you sign up. Document your enrollment. Set a calendar reminder before the trial ends. And check your bank statements every month for charges you do not recognize, because the entity billing you may not have the same name as the app you downloaded.

Related Topics: #FTC #GenesisTech #SubscriptionFraud #AppStore #DarkPatterns #ConsumerProtection #MobileApps #ROSCA #AppScams #DigitalFraud #MadMuscles #Nebula #PDFGuru