A Passport Website Can Mislead Before It Says a Word.

The transaction began in the search result

The FTC sued GovAssist LLC, Entry LLC, and Scott Zuckerman in the U.S. District Court for the District of Puerto Rico. According to the complaint, the companies have operated multiple sites offering passport, visa, and related travel-document services since at least October 2023. The agency alleges that paid Google advertisements appeared at or near the top of searches such as "passport renewal online" and sent users directly into application pages rather than explanatory homepages.

That routing matters. A consumer did not necessarily encounter the business as one private option among many. The allegation is that the sponsored result occupied the place where people expected to find the government, then delivered them into a page designed around the task they had asked the government to perform. Since April 2026, some ads included the words "Not a government website," the complaint says, but in smaller text above more prominent phrases such as "US Passport Online 2026."

The landing pages allegedly reinforced the impression with an American-flag seal, the Statue of Liberty, a statement identifying the State Department as the issuing agency, and a large "Get My Passport" button. After payment, the complaint says, a confirmation screen told consumers that their passport application had been submitted even though neither the consumer nor the defendants had submitted it to the State Department at that point.

These allegations are not findings. The FTC filed because it says it has reason to believe the law was violated, and the defendants are entitled to contest the facts and legal theories. That procedural posture should remain visible throughout any discussion of the case, especially when the agency's own press release uses the language of a scheme.

The first representation may be the position, name, and appearance of the result, not the sentence a consumer reads after clicking it.

A disclaimer does not get to grade its own effectiveness

The FTC's Rule on Impersonation of Government and Businesses makes it unlawful to materially and falsely pose as a government entity, directly or by implication, or to materially misrepresent government affiliation, endorsement, or sponsorship. The rule defines "materially" by effect: whether the representation is likely to influence a person's choice or conduct concerning goods or services.

That framework resists a familiar defense by screenshot. A company points to one accurate sentence and argues that the user was told the truth. The relevant question is broader. What net impression did the user receive from the ad, domain, imagery, headings, button labels, sequence of screens, price presentation, and confirmation message? A disclosure can be present yet functionally absent because it is too small, too late, placed on a page the user never visits, or contradicted by every more prominent signal.

The complaint alleges precisely that pattern. Some disclaimers appeared in footers or in light, small type. Users arriving through ads allegedly bypassed a homepage that more clearly described a document-processing business. Names and addresses supplied additional cues: "Gov" in GovAssist, a .us domain, "IVS" displayed with a seal, and "Entry" echoing the government's Global Entry program. None of those elements has to carry the entire deception theory alone. Their force is cumulative.

This is why design review cannot be separated from legal review. A lawyer who approves the disclosure text but never experiences the actual acquisition path has reviewed the least important part of the representation. The mobile ad, the landing page, and the post-payment message are not containers for legal language. They are the claim as the consumer encounters it.

The alleged harm was money, time, and sensitive data

The FTC alleges at least $40 million in consumer injury since October 2023. It says consumers were charged about $145 on average, with some paying as much as $499 for an urgent option. The agency also alleges that the sites advertised a service starting at $89 although the lowest listed option was $119 plus $29 shipping, and that government fees were separate. Those amounts are allegations to be proved, not adjudicated damages.

The practical mismatch is central. The State Department has exclusive authority to issue U.S. passports. Its current guidance says courier companies can help prepare an application but cannot make the government process it faster than an applicant can on their own. For eligible online renewals, the State Department says the only official portal is its own and that a third party cannot submit the application on the person's behalf.

The complaint says the defendants sometimes promised delivery in timeframes faster than the State Department offered, while many purchasers received only application paperwork that was available without charge. Consumers still had to take the legally required next step: appear in person, mail a prior passport, or submit an eligible renewal themselves. The product may have looked like completion while delivering preparation.

The data consequences are equally important. Passport applicants expect to provide identity documents, citizenship information, photographs, and payment details to the government. The FTC alleges that the same government-affiliation impression induced users to supply financial and other sensitive information to a private operator. That is why the complaint pleads not only deception and impersonation, but also a Gramm-Leach-Bliley Act theory based on allegedly obtaining customer financial information through false representations.

Fake reassurance can make the interface more persuasive

The complaint adds a second trust layer: reviews. The FTC alleges that the sites promoted excellent Trustpilot ratings and described reviews as verified, authentic experiences even though Trustpilot had identified and removed hundreds of purported reviews as fabricated. Again, that allegation remains disputed unless admitted or proved.

Reviews matter here for more than reputation. A user who notices something odd about an official-looking page may use social proof to resolve the doubt. Thousands of positive reviews can appear to confirm that other applicants used the same channel successfully. The review display therefore does not merely sell service quality. It can stabilize the claimed identity of the service itself.

The sequence is commercially powerful: rank above the official source, resemble the official source, promise a simpler or faster result, and use social proof to suppress hesitation. Each element may be optimized by a different team or vendor. Consumer law evaluates the combined experience. Fragmented ownership inside a company does not fragment the impression outside it.

A review badge can do more than praise the service. It can persuade a doubtful user that the service is what it appears to be.

Public access now depends on private interface literacy

The case exposes a structural weakness in digital government. Official services frequently sit below paid results that imitate the vocabulary of the task. The person searching is expected to understand sponsored placement, domain conventions, courier rules, government fee schedules, and the legal difference between preparing a form and submitting an application. That is a demanding literacy test for someone who may be traveling for an emergency, working in a second language, or simply trying to comply with an unfamiliar process.

Private assistance is not inherently deceptive. People may rationally pay for translation, organization, reminders, document review, or convenience. The boundary is clarity about identity and capability. The user should know who receives the information, what has actually been filed, which fee goes to whom, what the government alone can decide, and whether the private service can change the government's timing.

That standard applies to legal services too. A firm, referral platform, lead generator, or technology vendor should test the whole journey with fresh eyes. Search the terms a distressed client would search. Enter through the ad rather than the homepage. Complete the mobile flow. Read the confirmation literally. Ask whether a reasonable person could mistake assistance for representation, preparation for filing, screening for legal judgment, or a private company for an official channel.

The FTC still has to prove its case. Whatever happens in court, the complaint offers a useful discipline now: do not ask only whether the disclosure is accurate. Ask whether the experience tells the truth.