Inside the GOP Push to Regulate Online Political Donations — and the ActBlue Scandal Driving It

In April 2026, three House committees released a joint interim report accusing ActBlue — the dominant online fundraising platform for Democrats — of accepting illegal foreign donations and covering up internal warnings about its security gaps [1]. Within weeks, House Administration Committee Chairman Bryan Steil introduced two bills designed to impose new verification requirements on every platform that processes political contributions online [2]. The legislation arrives at a moment when ActBlue is simultaneously under DOJ investigation, facing a Texas attorney general lawsuit, and fending off allegations that its own lawyers warned it had misled Congress [3].

The stakes are enormous. ActBlue has processed more than $16 billion in donations since its founding in 2004, with $5.5 billion flowing through the platform in the 2024 cycle alone [4]. Any regulation that adds friction to small-dollar giving could reshape how both parties fund campaigns.

Source: ActBlue / FEC / OpenSecrets

Data as of Jul 1, 2025CSV

What the Bills Would Require

Steil's legislative package contains two bills: the Campaign Finance Transparency Act and the Preventing Foreign Influence in American Elections Act [2].

The Campaign Finance Transparency Act would:

• Require CVV and billing ZIP code verification for all credit and debit card donations processed through online platforms [2].
• Mandate name matching — the name on the card must match the name provided by the donor [2].
• Ban gift cards and prepaid debit cards from being used for political contributions [2].
• Require document verification (such as a U.S. passport number) for any donor without a domestic mailing address [2].
• Mandate reporting of suspected straw donation schemes to the Federal Election Commission [2].

The Preventing Foreign Influence in American Elections Act targets a different vector: it would prohibit foreign nationals from funding election-related activities beyond direct campaign contributions, including ballot harvesting, voter registration drives, and the commissioning of polls [2].

Both bills would apply equally to ActBlue and WinRed, the Republican counterpart [2]. A spokesman for Steil confirmed the committee plans to expedite their markup [2].

How Current Rules Compare

Federal election law already requires political committees to collect the name, address, occupation, and employer of anyone who donates more than $200 [5]. But the law does not require CVV verification, address verification system (AVS) checks, or any of the anti-fraud measures standard in e-commerce transactions [5]. This gap has persisted for years: most online retailers require a CVV code for every purchase, but political donation platforms have operated under no such mandate.

ActBlue said in August 2024 that it had begun expanding CVV verification in 2023 and was requiring it for all new credit card donations going forward [6]. However, a House report alleged that even after implementing CVV checks, ActBlue "made fraud-prevention rules more lenient twice in 2024" to compensate for donations lost due to the stricter requirements [1].

WinRed's specific CVV practices are less publicly documented. The platform's FAQ and public materials do not detail its verification protocols in comparable specificity [7]. This informational asymmetry makes direct comparison difficult — a gap that critics on both sides have pointed out.

The Evidence: What Investigators Found

The congressional investigation, conducted jointly by the House Administration, Judiciary, and Oversight committees, produced several specific findings [1]:

Overseas transactions: Investigators identified at least 237 overseas transactions using prepaid cards between September and October 2024 alone, originating from Brazil, Colombia, India, Iraq, the Philippines, and Saudi Arabia [8].

Scale estimates: Internal records reviewed by the committees suggested that as much as 6.4% of all ActBlue donations in the 2024 cycle "could have flowed from illicit sources" [9]. Applied to the platform's approximately $5.5 billion in 2024 volume, that figure would imply roughly $350 million in suspect transactions — though the committees acknowledged this is an upper-bound estimate, not a confirmed fraud total.

Individual cases: The Texas Attorney General's investigation surfaced cases of apparent identity misuse. FEC data showed 25,491 donations totaling $41,000 made in one donor's name, while the individual said the frequency and amounts did not reflect her actual giving. Another retiree had 7,539 donations totaling $213,163 attributed to them under similar circumstances [8].

Fifth Amendment invocations: Five current or former ActBlue employees who appeared for depositions invoked their Fifth Amendment right against self-incrimination 146 times in total, declining to answer every substantive question [1].

Mass departures: By March 2025, every member of ActBlue's legal and compliance team had resigned, been fired, or gone on extended leave [1].

The Internal Memos

The New York Times reported in April 2026 that ActBlue's outside counsel, Covington & Burling, had warned in internal memos that the platform's representations to Congress were not fully accurate [3]. Specifically, CEO Regina Wallace-Jones had told the House Administration Committee in 2023 that ActBlue used "multi-layered screenings" to root out foreign donations and processed overseas contributions only after verifying U.S. passport information [3].

The Covington memos reportedly stated that ActBlue did not consistently verify passport information and continued to allow overseas transactions via prepaid cards [3]. One memo warned: "It can be alleged that ActBlue accepted and/or facilitated the acceptance of foreign-national contributions into American elections," and that because staff were aware of the system's shortcomings, violations could be deemed "knowing and willful" — a standard that increases FEC penalties and gives the DOJ jurisdiction for criminal prosecution [3].

ActBlue severed ties with Covington & Burling after the memos surfaced. The platform's entire general counsel's office subsequently departed [10].

Federal Enforcement: Who Is Investigating What

Multiple enforcement actions are now running in parallel:

DOJ: President Trump directed Attorney General Pam Bondi to investigate online fundraising platforms, with ActBlue specifically named. The probe targets illegal straw donors and foreign contributions [9].

FBI: Chairman Steil received a classified briefing at FBI headquarters in September 2025, after which his office confirmed the FBI has "a number of active investigations into campaign finance violations" related to the platform [9].

Texas AG: Ken Paxton filed a lawsuit against ActBlue in April 2026, alleging the platform deceived the public about its donation verification processes [8]. Paxton had previously made a criminal referral to the DOJ [11].

FEC: Multiple complaints have been filed, including one against Rep. Jasmine Crockett over ActBlue donations [12]. Judicial Watch has sued the FEC for records related to ActBlue donor fraud allegations [13]. The FEC has not publicly announced any enforcement action.

No federal agency has yet issued findings confirming systematic fraud. The investigations remain open, and ActBlue has not been charged with any crime.

ActBlue's Defense

ActBlue has mounted an aggressive public response, characterizing the investigations as "completely baseless" partisan attacks designed to cripple Democratic fundraising [14].

The platform points to several specifics:

• Scale and track record: Twenty-eight million Americans have used ActBlue over 20 years, with an average donation of approximately $40 [14].
• Fundraising records: ActBlue raised more than $400 million in Q1 2025, which it described as a record quarter driven in part by donor backlash against the investigations [14].
• Security measures: The platform says it employs external fraud prevention tools that examine over 140 signals per transaction, including card age, issuer country, and address changes. Flagged donations receive manual review [14].
• PCI compliance: ActBlue maintains PCI DSS certification with what it describes as the highest ratings for compliance and payment security [14].
• New restrictions: As of 2025, Americans living abroad must be physically present in the U.S. to contribute through ActBlue, even though federal campaign finance law permits overseas donations [14].

Campaign finance experts cited by ActBlue, including a former FEC enforcement attorney, have said the straw donor and money laundering claims are "unsubstantiated" and stem from misreadings of FEC data [14].

The WinRed Counterpoint

Democrats and media organizations have pointed to WinRed's own problems as context for the ActBlue scrutiny.

Federal Trade Commission data compiled by CNN shows that consumers filed 803 complaints against WinRed between January 2022 and June 2024, compared to 120 complaints against ActBlue during the same period [15]. The complaints against WinRed centered on deceptive recurring charges — pre-checked boxes that enrolled donors in weekly or monthly contributions without clear consent [15].

Source: FTC / CNN

Data as of Jun 30, 2024CSV

CNN's investigation found that WinRed's practices "overwhelmingly impact elderly voters," with one Arizona man charged upward of $700 per week for at least a year before his wife discovered the charges [15]. Another donor was charged nearly $90,000 across six credit cards [15]. WinRed issued $122 million in refunds by the end of 2024 [15].

Four state attorneys general launched consumer protection investigations into both WinRed and ActBlue in 2021 over pre-checked recurring donation boxes [15]. Senator Richard Blumenthal has pressed the Trump administration on what he called "politically motivated targeting of ActBlue" while WinRed's consumer harm goes unaddressed [16].

Who Gets Hurt by Stricter Verification?

The proposed verification requirements raise practical questions about access to small-dollar giving. Academic research has found that donors contributing less than $200 tend to be younger, lower-income, and more likely to be women compared to large-dollar donors [17].

Banning prepaid cards and gift cards would remove an option used by donors who lack traditional bank accounts — a group that skews lower-income and disproportionately includes communities of color. Requiring name matching and billing address verification could create barriers for donors whose card information doesn't perfectly align with voter records — married individuals who changed names, people with name variations, or those who recently moved.

No comprehensive study has quantified how many legitimate donors would be blocked or delayed by the proposed requirements. The Institute for Free Speech has separately challenged FEC disclosure requirements for small-dollar conduit contributions on First Amendment grounds, arguing that public disclosure of even small political donations can produce personal and professional retaliation [18].

The Steil bills do not include any provision for studying the access impact before implementation, nor do they propose alternative verification pathways for donors who lack standard credit cards.

The International Precedent Question

Card-not-present (CNP) fraud is a well-documented problem outside the political donation context. In the United Kingdom, CNP fraud accounts for roughly 70% of all card fraud losses, with the country leading Europe in total CNP fraud volume [19]. The European Union addressed this through the Payment Services Directive (PSD2), which mandated strong customer authentication for online transactions — essentially requiring two-factor verification for card-not-present payments [19].

The PSD2 framework offers a partial precedent for the Steil bills. European regulators imposed authentication requirements on financial institutions through regulation rather than waiting for platforms to self-correct. The result was a measurable reduction in CNP fraud, though it also introduced friction that temporarily reduced conversion rates for legitimate transactions [19].

Whether political donations — protected as political speech under the First Amendment — can or should be subjected to the same verification standards as commercial transactions is a legal question that has not been tested.

What Happens Next

The Campaign Finance Transparency Act and the Preventing Foreign Influence in American Elections Act are scheduled for markup by the House Administration Committee. With Republican control of the House, the bills have a plausible path to a floor vote. Senate prospects are less clear.

Meanwhile, the DOJ investigation, FBI probes, and Texas lawsuit continue. ActBlue faces the prospect of fighting on multiple fronts — legislative, legal, and regulatory — simultaneously.

The central tension remains unresolved: Republicans point to the congressional findings, internal memos, and Fifth Amendment invocations as evidence of systematic wrongdoing that demands legislative action now. Democrats and ActBlue counter that the enforcement process should run its course before Congress imposes requirements that could suppress legitimate small-dollar participation in elections. Both sides cite the integrity of the democratic process. Neither has yet produced a definitive accounting of how much fraud, if any, actually occurred — or how many legitimate donors would be caught in the crossfire of stricter rules.