This legislation seeks to curb unfair practices in online retail by prohibiting the use of automated tools to bypass website security measures and purchasing limits. Specifically, it makes it unlawful for any person to circumvent technological controls designed to ensure equitable consumer access to products or to manage inventory on internet websites or online services. Furthermore, the bill prohibits the sale or offering for sale of any product or service obtained through such unlawful circumvention, particularly if the seller was involved in, controlled, or had knowledge of the illicit acquisition. However, it includes exceptions for activities related to law enforcement investigations or for legitimate research aimed at identifying and improving computer system security vulnerabilities. Enforcement of these provisions falls under the purview of the Federal Trade Commission (FTC) , treating violations as unfair or deceptive acts or practices under the Federal Trade Commission Act. Additionally, State Attorneys General are empowered to bring civil actions on behalf of their residents to seek injunctions, compel compliance, and obtain damages or restitution for violations. States must generally notify the FTC before initiating such actions, and the FTC retains the right to intervene in State-led cases.
Read twice and referred to the Committee on Commerce, Science, and Transportation.
Stopping Grinch Bots Act of 2025
USA119th CongressS-3516| Senate
| Updated: 12/17/2025
This legislation seeks to curb unfair practices in online retail by prohibiting the use of automated tools to bypass website security measures and purchasing limits. Specifically, it makes it unlawful for any person to circumvent technological controls designed to ensure equitable consumer access to products or to manage inventory on internet websites or online services. Furthermore, the bill prohibits the sale or offering for sale of any product or service obtained through such unlawful circumvention, particularly if the seller was involved in, controlled, or had knowledge of the illicit acquisition. However, it includes exceptions for activities related to law enforcement investigations or for legitimate research aimed at identifying and improving computer system security vulnerabilities. Enforcement of these provisions falls under the purview of the Federal Trade Commission (FTC) , treating violations as unfair or deceptive acts or practices under the Federal Trade Commission Act. Additionally, State Attorneys General are empowered to bring civil actions on behalf of their residents to seek injunctions, compel compliance, and obtain damages or restitution for violations. States must generally notify the FTC before initiating such actions, and the FTC retains the right to intervene in State-led cases.