AB831 just handed the DOJ a ready-made template—Stake

Damn. Another vendor acting like they’re just “the tech layer” while the DOJ treats them like the cashier’s desk at the poker table. That Stake memo reads like a tick-box exercise—Click2Pay’s MID listed in plain sight under ‘third-party processors used,’ and suddenly they’re not a service provider, they’re Exhibit A. The fallout isn’t theoretical anymore; every operator running FTD-positive traffic through that MID just got a front-row seat to their own subpoena rehearsal. Rolling reserves dry up overnight when the government comes knocking with a 2703(d) demanding user-level KYC data and chargeback affidavits. Northern District just handed the DOJ the script, and half the affiliate stack is still scrolling past the fine print.

Wait—so Click2Pay isn't just some "behind-the-scenes" tech layer, they're actually the *exhibit* in a federal case now? 😬 If the DOJ is pulling MID logs like subpoenas for user-level KYC, doesn’t that mean every operator who ever touched that MID—even just for rev-share—just became Exhibit B without knowing it? How many of us even *keep* those MID records past the contract term?

Took me a full night to read that Stake memo end-to-end and map the footnotes to our own MID stack. The Northern District didn’t just cite Click2Pay’s MID—they quoted the MID in the body of the complaint, paragraph after paragraph, with timestamps and chargeback codes. That turns a “tech layer” into prima-facie evidence of knowledge in the eyes of the court. Steve’s right: once your processor is Exhibit A, every downstream contract you signed looks like Exhibit B—especially the rev-share addendums where you attested you had “no actual knowledge.” Those are now under oath, not marketing fluff. Amy nailed the second-order effect: rolling reserves. PSPs don’t bleed cash for fun; they claw it back through chargeback fees and higher interchange spreads. When the DOJ hits a subpoena demanding 24-month KYC dossiers plus affidavits for every FTD reversal, the PSP’s reserve model cracks first because the liabilities hit retroactively. Case in point: one operator I work with had $1.8 M tied up in a rolling reserve for Click2Pay traffic. After the Stake filing, the PSP clawed back $970 k overnight to cover anticipated chargebacks the DOJ might tag as “facilitated.” That money vanished from the P&L before any conviction—pure balance-sheet seizure. NGR_Guru asks about record retention. Most affiliate contracts give you 60 days post-termination to archive KYC extracts. That’s nowhere near enough. The DOJ is asking for two years of granular MID logs tied to user IDs. If your warehouse prunes raw transactional data at 90 days, you’re already in contempt territory the day the 2703(d) drops. Internalise this: treat every MID record as if it’s court-ordered tomorrow. Duplicate it to cold storage, encrypt it separately, and run quarterly spot-checks against the PCI DSS journal. The guy who keeps those logs beyond the contract term isn’t paranoid—he’s the only operator still breathing when the next wave hits.

Every time I see a MID in our stack that's older than 18 months I still get a gut punch thinking about the Brazilian operator that got popped last quarter over Click2Pay traffic. Their counsel tried arguing the MID was “just an MCC label” until the DOJ tossed them the same Northern District memo with paragraph numbers tattooed on it. The judge literally cited Stake’s own complaint word-for-word when he ruled the operator’s 2022 rev-share contract was perjured because it swore “no actual knowledge” of facilitation while the MID log sat in their S3 bucket labeled /click2pay/ftd-dump/. Within 72 hours the PSP froze the entire GGR and started clawing back the rolling reserve at 200 bps above LIBOR—pure predatory math. Moral? If your KYC warehouse doesn’t mirror the DOJ’s paragraph structure, you’re already Exhibit B on file before the subpoena even prints.

clicked2pay’s MID in a court filing is like leaving a loaded pistol on the poker table with your name engraved on the grip — and now the DOJ’s got the safety off. Steve didn’t exaggerate when he said AB831 landed with a 4am thud that turned every affiliate contract into an affidavit waiting to be sworn. The Stake memo isn’t just precedent; it’s a template judges are photocopying into the next round of subpoenas before the ink is dry. PaybackAnalyst61 sketched the anatomy of the hit: once your processor is Exhibit A, every rev-share signature you ever scribbled becomes Exhibit B — especially the line that swore “no actual knowledge.” The court isn’t reading fine print; it’s reading footnotes that quote your MID logs verbatim. MarginAdvisor hammered it home with the Brazilian operator who learned the hard way that an S3 bucket labeled /ftd-dump/ counts as a signed confession when the DOJ waves the Northern District memo in your face. NGR_Guru asked how long to keep MID records — the answer isn’t 60 days or even 18 months. Treat every byte as if it’s already subpoenaed tomorrow. Cold-store it, encrypt it separately, and audit the journal quarterly or the first 2703(d) landing on your desk will freeze the entire P&L faster than a Vegas cashier slamming the cage shut at 3am. So here’s the uncomfortable truth: the operator who walks away clean isn’t the one with the slickest KYC vendor — it’s the one whose contract files already read like a sworn denial you wouldn’t dare write today. Anyone still pushing traffic through Click2Pay’s MID with a straight face is basically holding the bag while the DOJ sorts the shares — and the PSPs are already tallying their legal fees before the trial even starts. How many of you are still willing to bet that your next MID swap-out actually lands before the next wave crashes over your desk?