Bitcoin, Blockchain and Consumer Protection Laws

by Holland & Knight LLP

Holland & Knight LLP


  • Unsophisticated consumers eager to make a profit remain susceptible to representations by companies that are false and misleading, and constitute deceptive acts or practices in violation of the Federal Trade Commission (FTC) Act.
  • In February 2016, Butterfly Labs and two of its operators agreed to settle FTC charges that they deceived thousands of consumers about the availability, profitability, and newness of machines designed to mine the virtual currency known as Bitcoin, and that they unfairly kept consumers' up-front payments despite failing to deliver the machines as promised.
  • The Butterfly Labs settlement and subsequent private lawsuits are an important reminder to companies and marketers that utilize blockchain technology that the FTC's ongoing mission to protect consumers extends to new and emerging financial technology. In addition, the risk of private suits, including class actions, are a landmine for those focused only on government enforcement.

If the surge in interest and investment in Bitcoin has any historical equivalent, the closest parallel may be the California gold rush in the mid-1800s. Most of the people who flocked to northern California to prospect for gold had almost none of the necessary means to succeed. Merchants and entrepreneurs such as John Studebaker, who manufactured wheelbarrows; Levi Strauss, who received a patent for the now-famous riveted pants; and bankers Henry Wells and William Fargo made their fortunes catering to the mining industry – not mining themselves. Fast forward 150 years and unsophisticated consumers eager to make a profit remain susceptible to representations by companies that are false and misleading, and constitute deceptive acts or practices in violation of Section 5(a) of the Federal Trade Commission (FTC) Act, 15 U.S.C. §45(a).

The Background

In the words of Jessica Rich, director of the FTC's Bureau of Consumer Protection: "[w]e often see that when a new and little-understood opportunity like Bitcoin presents itself, scammers will find ways to capitalize on the public's excitement and interest."1 Soon after this statement, in February 2016, BF Labs, Inc., d/b/a "Butterfly Labs", and its part-owner Sonny Vleisides and general manager Darla Drake, agreed to a settlement with the FTC that included partially suspended monetary judgments and a prohibition against deceptive claims relating to Bitcoin mining products and services. The settlement marks the FTC's first foray into the world of Bitcoin and blockchain technologies.

In Butterfly Labs, the FTC alleged that the defendants participated in deceptive and unfair acts or practices in violation of Section 5 of the FTC Act, 15 U.S.C. §45, in the sale and marketing of Bitcoin mining products and services. Butterfly Labs charged consumers between $149 and $29,899 upfront for machines, largely paid through preorders, that allegedly were never provided to consumers. According to the FTC:

"the testimony of several former employees . . . shows that instead of fulfilling orders immediately, Defendants used their customers' machines to mine Bitcoins for themselves before shipping the now used machines to their customers. Thus, Defendants pocketed Bitcoins that should have gone to their customers. Further demonstrating Defendants' disregard for their customers, they used corporate funds to make and mass order red foam pitchforks mocking their own customers, emblazoned with the words, 'Y U NO SHIP – BFL IS LATE!'"

The FTC also alleged that the defendants misrepresented the profitability and yield of their Bitcoin mining machines. Specifically, they posted a "calculator on all of their social media pages, including Facebook, Twitter, and Tumblr, telling consumers to 'measure your ROI with this cool Bitcoin mining calculator.'" The FTC also alleged that the defendants shipped outdated products to consumers and did not provide refunds.

Butterfly Labs and Vleisides agreed to a monetary judgment of $38,615,161, suspended upon Butterfly Labs' payment of $15,000, and Vleisides' payment of $4,000. Drake, who owed $135,878, agreed to surrender the cash value of all Bitcoins she obtained using company machines. The judgments were suspended based on the defendants' inability to pay.

Lessons for the Future

The settlement with Butterfly Labs and its management is an important reminder to companies and marketers that utilize blockchain technology that the FTC's ongoing mission to protect consumers extends to new and emerging financial technology. In addition, the risk of private suits, including class actions, are a landmine for those focused only on government enforcement. It is essential to understand that "the blockchain" does not exist as a single monolithic thing. The term first emerged to describe the manner in which Bitcoin transactions are aggregated and processed in data objects known as blocks, which in addition to transaction data, includes a cryptographic link to the previous block. Thus, any attempt to change or alter the data in a block results in a cascading effect on all subsequent blocks, which increases the amount of computational power needed to alter the ledger.2

All blockchain technologies have three essential components: peer-to-peer (P2P) network, consensus mechanism and a database or ledger (i.e., hash-linked data structures).3In other words, blockchain amounts to connected computers that reach agreement over shared data and have a means of recording that data or otherwise allowing for its retrieval if desired.4 This simplified explanation gets a tad more complex when we consider that software is used to develop rules for the connected computers that facilitate agreement and cryptographic techniques are applied to the shared data for verification and validation purposes.

While blockchain technology is best known as the foundation Bitcoin, it is now being explored for other consumer-focused uses including payment systems and "smart contracts." Additional future uses for blockchain technologies may include identity credentials, voter records, permissions, security transactions, property/land use records, interbank settlement records and cloud storage.

Conclusion and Takeaways

As blockchain technology advances to expand the ways consumers can store and share data, companies operating in this space must be aware of the current consumer protection laws enforced by federal and state regulators as well as be on the forefront of the evolution of these laws to ensure future compliance. Given the uncertainty that surrounds both the future of blockchain technology and consumer protection laws, it is important for companies to begin creating or modifying current compliance protocols to account for both blockchain technology and its impact on the consumer industry. These protocols may include implementing greater protections of consumer's virtual wallets and accounts, creating disclaimers to educate consumers on the technical aspects of Bitcoin transaction (e.g., the finality of a transaction, effect of lost or stolen funds, evolution of regulation concerning cryptocurrency, etc.), and creating internal compliance rules and committees governing the company's actions relating to its involvement in the cryptocurrency industry.

This preparation is essential for both companies directly operating in the blockchain and cryptocurrency industry and those companies currently accepting (or planning to accept) cryptocurrency as a form of payment. Given the consumer market's interest in cryptocurrency and the concerns regarding the regulation of Bitcoin exchanges, volatility in Bitcoin prices, the development of investment products based on cryptocurrency and the consumer risks associated with bad actors, companies should expect that the FTC and other regulators will pay special attention to all actors operating in the industry. The message is simple: all participants in this space will be required to do their part to protect consumers. Well-intentioned companies should also be sure they have a sufficient understanding of the potential risks associated with any blockchain-based services or goods they are offering for sale to the public, which includes technical matters that may be relevant. A defense based on ignorance of the risks a product poses to consumers is likely to be a weak one, especially where it is shown a basic level of diligence would have made those risks apparent or that the product was based on technology sufficiently complex that to offer it for sale was reckless.


1 At FTC's Request, Court Halts Bogus Bitcoin Mining Operation

2FinTech Forum: Artificial Intelligence and Blockchain, Peter Van Valkenburgh Transcript - March 9, 2017.



DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Holland & Knight LLP | Attorney Advertising

Written by:

Holland & Knight LLP

Holland & Knight LLP on:

Readers' Choice 2017
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up using*

Already signed up? Log in here

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
Privacy Policy (Updated: October 8, 2015):

JD Supra provides users with access to its legal industry publishing services (the "Service") through its website (the "Website") as well as through other sources. Our policies with regard to data collection and use of personal information of users of the Service, regardless of the manner in which users access the Service, and visitors to the Website are set forth in this statement ("Policy"). By using the Service, you signify your acceptance of this Policy.

Information Collection and Use by JD Supra

JD Supra collects users' names, companies, titles, e-mail address and industry. JD Supra also tracks the pages that users visit, logs IP addresses and aggregates non-personally identifiable user data and browser type. This data is gathered using cookies and other technologies.

The information and data collected is used to authenticate users and to send notifications relating to the Service, including email alerts to which users have subscribed; to manage the Service and Website, to improve the Service and to customize the user's experience. This information is also provided to the authors of the content to give them insight into their readership and help them to improve their content, so that it is most useful for our users.

JD Supra does not sell, rent or otherwise provide your details to third parties, other than to the authors of the content on JD Supra.

If you prefer not to enable cookies, you may change your browser settings to disable cookies; however, please note that rejecting cookies while visiting the Website may result in certain parts of the Website not operating correctly or as efficiently as if cookies were allowed.

Email Choice/Opt-out

Users who opt in to receive emails may choose to no longer receive e-mail updates and newsletters by selecting the "opt-out of future email" option in the email they receive from JD Supra or in their JD Supra account management screen.


JD Supra takes reasonable precautions to insure that user information is kept private. We restrict access to user information to those individuals who reasonably need access to perform their job functions, such as our third party email service, customer service personnel and technical staff. However, please note that no method of transmitting or storing data is completely secure and we cannot guarantee the security of user information. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time.

If you have reason to believe that your interaction with us is no longer secure, you must immediately notify us of the problem by contacting us at In the unlikely event that we believe that the security of your user information in our possession or control may have been compromised, we may seek to notify you of that development and, if so, will endeavor to do so as promptly as practicable under the circumstances.

Sharing and Disclosure of Information JD Supra Collects

Except as otherwise described in this privacy statement, JD Supra will not disclose personal information to any third party unless we believe that disclosure is necessary to: (1) comply with applicable laws; (2) respond to governmental inquiries or requests; (3) comply with valid legal process; (4) protect the rights, privacy, safety or property of JD Supra, users of the Service, Website visitors or the public; (5) permit us to pursue available remedies or limit the damages that we may sustain; and (6) enforce our Terms & Conditions of Use.

In the event there is a change in the corporate structure of JD Supra such as, but not limited to, merger, consolidation, sale, liquidation or transfer of substantial assets, JD Supra may, in its sole discretion, transfer, sell or assign information collected on and through the Service to one or more affiliated or unaffiliated third parties.

Links to Other Websites

This Website and the Service may contain links to other websites. The operator of such other websites may collect information about you, including through cookies or other technologies. If you are using the Service through the Website and link to another site, you will leave the Website and this Policy will not apply to your use of and activity on those other sites. We encourage you to read the legal notices posted on those sites, including their privacy policies. We shall have no responsibility or liability for your visitation to, and the data collection and use practices of, such other sites. This Policy applies solely to the information collected in connection with your use of this Website and does not apply to any practices conducted offline or in connection with any other websites.

Changes in Our Privacy Policy

We reserve the right to change this Policy at any time. Please refer to the date at the top of this page to determine when this Policy was last revised. Any changes to our privacy policy will become effective upon posting of the revised policy on the Website. By continuing to use the Service or Website following such changes, you will be deemed to have agreed to such changes. If you do not agree with the terms of this Policy, as it may be amended from time to time, in whole or part, please do not continue using the Service or the Website.

Contacting JD Supra

If you have any questions about this privacy statement, the practices of this site, your dealings with this Web site, or if you would like to change any of the information you have provided to us, please contact us at:

- hide
*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.