DOJ and FTC Sue San Diego Ticket Broker REPS & Company Over 18.5 Million Tickets Bought Above Limits

The Better Online Ticket Sales Act, commonly known as the BOTS Act, was enacted in December 2016 to prevent ticket buyers from using software or other technological means to circumvent security measures, access control systems, or other controls on ticket issuer websites. These measures are designed to enforce posted ticket limits or maintain the integrity of online ticket purchasing order rules. The law gives federal regulators a tool to pursue those who use automated bots, fake accounts, and proxy services to buy tickets in bulk and resell them at markups.

Ticket issuers such as Ticketmaster and AXS employ a range of controls to enforce purchase limits. These include quantity selectors capped at the purchase limit, and monitoring of verifiable accounts and unique credit cards, email addresses, phone numbers, and IP addresses. When these controls work, ordinary fans have a fair chance to buy tickets at face value. When they are circumvented, tickets can be scooped up in seconds and resold on secondary marketplaces at significantly higher prices. This dynamic has been a source of frustration for concertgoers for years.

On October 15, 2026, the Federal Trade Commission and the Department of Justice filed a civil complaint in the U.S. District Court for the Southern District of California against REPS & Company Inc. and three of its executives: CEO Ryan Pancheri, President Brian Archibald, and Chief Operating Officer Nicholas Totagrande. The complaint alleges violations of the BOTS Act and Section 5(a) of the FTC Act. The government seeks a permanent injunction, monetary judgment, and civil penalties.

Key Facts

The Federal Trade Commission announced on October 15 that REPS & Company illegally bypassed ticket-issuer security measures to exceed purchasing limits. The complaint was filed by the Department of Justice upon notification and referral from the FTC. According to the complaint, since at least 2022, the defendants purchased more than 18.6 million tickets from ticket issuers Ticketmaster and AXS through more than 3.1 million ticket purchasing transactions. For at least 83,500 events, they purchased more than eight tickets, spending over $1.3 billion to amass more than 18.5 million tickets. The government alleges the company generated at least $120.8 million in profit by reselling those tickets on the secondary marketplace.

The Department of Justice alleged on October 15 that the defendants used thousands of ticket purchasing accounts created with names, addresses, or phone numbers belonging to someone other than the purchaser, and connected to virtual credit card accounts and phone numbers controlled by REPS. They also used software including IP proxy services to utilize multiple IP addresses and multi-session browsers to mask their identity and location. When issuers blocked or canceled purchases, REPS made slight changes to account holder names or addresses and developed workarounds. An internal document called an Error Bible catalogued Ticketmaster error messages.

Rolling Stone reported on October 15 that the 22-page lawsuit says REPS sidestepped ticket limits for at least 83,000 events. The company targeted concerts by Beyonce, Post Malone, Pitbull, and Luke Bryan, as well as Broadway shows and college sporting matches. For one Beyonce Renaissance tour concert at Arrowhead Stadium on October 1, 2023, REPS used at least 1,300 accounts to purchase 7,624 tickets through Ticketmaster. The purchase limit was between four and eight, and REPS allegedly made approximately $833,323 in profit reselling those tickets. For a September 7, 2024 Pitbull concert in Syracuse, New York, REPS allegedly used at least 700 accounts to buy 5,430 tickets through Ticketmaster, nearly one-third of the Empower Federal Credit Union Amphitheater's capacity, making approximately $120,109 in profit.

The Hollywood Reporter reported on October 15 that the FTC and DOJ allege REPS hired ticket purchasers in the Philippines and took steps to conceal IP addresses and use VPNs. The Commission vote to refer the complaint to the DOJ for filing was 2-0. The complaint notes that after a human-verification pop-up caused a reported 40 percent slowdown of purchases, REPS used proxy IP addresses to avoid it. In September 2025, the company learned that Ticketmaster began tracking account IP addresses. The defendants knew of the BOTS Act since its December 2016 enactment, nearly a year before REPS was formed, and continued to operate.

Analysis

The scale of the alleged scheme is remarkable. The government claims REPS spent more than $1.3 billion to acquire over 18.5 million tickets for at least 83,500 events, generating at least $120.8 million in resale profit. Those numbers suggest a highly organized, industrial approach to ticket purchasing that goes far beyond a single fan using a bot. The use of thousands of accounts, virtual credit cards, and IP proxies indicates a sophisticated operation designed to evade detection. What this really means is that the BOTS Act, which had been on the books since 2016, is now being enforced with significant resources and against major players in the ticket resale market.

Assistant U.S. Attorney General Brett A. Shumate said the Justice Department is committed to holding accountable individuals and businesses that drive up the cost of event tickets by illegally exceeding ticket purchase limits and reselling those unlawfully obtained tickets with exorbitant markups. Christopher Mufarrige, director of the FTC's Bureau of Consumer Protection, said REPS' entire business model is focused on trying to game the ticket-purchasing system to obtain as many tickets as possible to resell at inflated prices to consumers. He added that companies seeking to profit by driving up prices or depriving ordinary fans of access to reasonably priced tickets should be on notice that the agencies are watching and will take action.

The case also highlights the role of technology in modern ticketing. Ticketmaster and AXS use quantity selectors, account monitoring, and IP tracking. REPS allegedly responded with proxy services, multi-session browsers, and an Error Bible of workarounds. The reported 40 percent slowdown from a human-verification pop-up shows how quickly bad actors adapt. The bigger picture here is that enforcement alone may not be enough if the economic incentives to circumvent purchase limits remain high. The profit from a single Beyonce show, approximately $833,323, illustrates why the defendants allegedly took such risks.

Why It Matters

The lawsuit matters because it targets not just a company but also its top executives. Ryan Pancheri, Brian Archibald, and Nicholas Totagrande are named as defendants, meaning they could face personal liability for the alleged violations. This signals that the government is willing to pursue individuals, not just corporations, in BOTS Act cases. The outcome could set a precedent for how far executives can be held responsible for a company's ticket-buying tactics.

For consumers, the case underscores the ongoing frustration of trying to buy tickets to popular events. When tickets are bought in bulk by brokers using illegal means, ordinary fans often face higher prices or find tickets unavailable. The FTC and DOJ say REPS' business model was predicated on identifying high-demand events and buying up tickets before ordinary consumers could. The allegations that REPS used 700 accounts to buy 5,430 tickets for a Pitbull show, nearly one-third of the venue's capacity, show how such tactics can shut out regular buyers.

Next Up

The case is now pending in the U.S. District Court for the Southern District of California, case number '26CV5895 CAB BJW. The government seeks a permanent injunction, monetary judgment, and civil penalties. The suit follows a 2025 Trump executive order calling for increased enforcement of the BOTS Act, and the FTC's separate lawsuit against Live Nation and Ticketmaster. How the court handles the REPS case could influence future enforcement actions and the broader debate over ticketing reform.