The BOTS Act tickets law — the Better Online Ticket Sales Act of 2016 — is the federal law that makes it illegal to use ticket bots (and other schemes) to dodge purchase limits and snatch up event tickets. Signed on December 14, 2016, it targets the software and tactics that let scalpers buy hundreds or thousands of tickets in seconds, then flip them at inflated prices. Below: what the law prohibits, who enforces it, the penalties, and the real cases that are finally giving it teeth.
A note on scope: this article is about the law against bot operators — not the “Ticketmaster thinks I’m a bot” error. If Ticketmaster is flagging you as a bot, see our troubleshooting guide: Ticketmaster thinks I’m a bot — how to fix it.
What the BOTS Act Prohibits
The Act (Public Law 114-274) has two main prongs, and it applies to public events at venues with a capacity over 200 people:
- Circumventing purchase controls. It is unlawful to circumvent a security measure, access control system, or other technological measure on a ticket seller’s website that is used to enforce posted ticket-purchasing limits or to maintain the integrity of posted online purchasing rules. That covers classic ticket bots — software that auto-fills forms, refreshes pages, and checks out faster than any human — but the FTC reads “circumvention” broadly: it has also pursued schemes built on thousands of fake Ticketmaster accounts, masked IP addresses, virtual credit cards, and SIM boxes.
- Selling the ill-gotten tickets. It is also unlawful to sell (or offer to sell) tickets in interstate commerce that were obtained through such circumvention — if the seller participated in the violation, could control it, or knew or should have known about it.
There is a narrow carve-out: it’s not unlawful to build or use such software for security research — investigating alleged violations, or identifying flaws in security measures to advance computer security.
Who Enforces It — and What the Penalties Are
The law gives enforcement power to two parties:
- The Federal Trade Commission (FTC). Violations are treated as unfair or deceptive acts or practices under the FTC Act, so the FTC can bring enforcement actions directly. The Act originally set fines at $16,000 per violation; adjusted for inflation, legal analyses in 2025 put the figure at up to $53,088 per violation.
- State attorneys general. States can bring actions on behalf of their residents.
Enforcement lay mostly dormant for years — the FTC brought its first case in early 2021 — but momentum has shifted sharply. On March 31, 2025, an executive order titled “Combating Unfair Practices in the Live Entertainment Market” directed the FTC to rigorously enforce the BOTS Act and address unfair ticket scalping practices. Since then, the agency has opened its most aggressive cases yet.
Real Cases: The Law in Action
1. The FTC’s first BOTS Act sweep (2021)
In January 2021, the FTC brought its first enforcement action under the Act against three ticket-broker operations — Concert Specials, Just In Time Tickets, and Cartisim — accused of using ticket-buying bots, CAPTCHA bypasses, fake names and addresses, hundreds of credit cards, and IP maskers to buy thousands of tickets on Ticketmaster. The proposed consent orders carried combined civil penalties of $36.1 million, much of it suspended due to the defendants’ inability to pay, plus decade-long compliance reporting and record-keeping requirements.
2. Key Investment Group and the Taylor Swift Eras Tour (2025–2026)
The highest-profile case so far: in August 2025, the FTC sued Key Investment Group (KIG), a Maryland-based broker operating as Epic Seats, TotalTickets.com, and Totally Tix, for allegedly circumventing Ticketmaster’s purchase limits on high-demand events — most notably Taylor Swift’s Eras Tour.
- KIG allegedly purchased at least 379,776 tickets in just over a year, spending nearly $57 million and reselling them for roughly $64 million.
- For one Eras Tour show alone, the defendants allegedly used 49 different accounts to buy 273 tickets — against a posted limit of six per event.
- In total, the FTC says KIG acquired 2,280 Eras Tour tickets between March and August 2023, generating more than $1.2 million in resale revenue.
KIG argues the law targets automated bots, not its human-run multi-account purchasing — but a federal judge denied the motion to dismiss on April 28, 2026, ruling the FTC had plausibly alleged BOTS Act violations. The case is proceeding toward discovery and trial.
3. The FTC vs. Ticketmaster itself (2026)
In a striking twist, the FTC has also turned the BOTS Act on Ticketmaster — alleging the company effectively enabled scalpers by turning a “blind eye” to brokers circumventing ticket limits, citing an internal email in which a senior executive allegedly said so “as a matter of policy.” In September 2026, a federal judge ruled the case could proceed, finding the allegations sufficient to support BOTS Act claims. Ticketmaster maintains it is a leader in fighting bots and calls the suit misguided. (The same suit also targets Ticketmaster’s former drip-pricing practices.)
What the BOTS Act Does Not Do
- It doesn’t ban ticket bots outright as software — it bans using circumvention to beat purchase limits, and selling the resulting tickets.
- It doesn’t cover small venues — events at venues with capacity of 200 or fewer are outside the Act’s scope.
- It doesn’t give fans a private right to sue — enforcement runs through the FTC and state attorneys general.
- It doesn’t end scalping by itself — brokers can still buy within posted limits and resell legally. State resale laws fill part of that gap; see our state-by-state ticket resale law guide.
Does the BOTS Act Actually Help Fans?
The theory is straightforward: if scalpers can’t vacuum up inventory with bots, more tickets reach real fans at face value. In practice, the law’s impact has been limited — the FTC’s first case came five years after enactment, and sophisticated brokers adapted with multi-account human operations that sit in legal gray areas (exactly what the KIG case is testing). But the 2025 executive order and the active KIG and Ticketmaster cases signal the most serious enforcement era the law has seen. For now, the practical takeaway for buyers: bots remain illegal to operate, but you still can’t rely on the law alone — use presales, Verified Fan, and official resale channels to protect your own purchases.
FAQs
What is the BOTS Act?
The Better Online Ticket Sales Act of 2016 (Public Law 114-274) is the US federal law making it illegal to circumvent a ticket seller’s security or access controls — such as posted purchase limits — using bots or similar tactics, and to resell tickets obtained that way. It applies to public events at venues seating more than 200.
Is using a ticket bot illegal?
Using bots or other schemes to bypass posted ticket-purchasing limits violates the BOTS Act, and selling tickets obtained through such circumvention is also unlawful if the seller knew or should have known. The FTC enforces the law, with penalties of up to $53,088 per violation (inflation-adjusted from the original $16,000).
Has anyone actually been punished under the BOTS Act?
Yes. The FTC’s first case in 2021 hit three broker operations with $36.1 million in combined penalties (mostly suspended). The highest-profile ongoing case is the FTC’s 2025 suit against Key Investment Group over alleged limit-circumvention on Taylor Swift Eras Tour tickets — a judge let it proceed in April 2026. The FTC is also pursuing BOTS Act claims against Ticketmaster itself.
Does the BOTS Act apply to resale sites like StubHub?
The Act targets whoever circumvents purchase controls and whoever sells tickets obtained that way — regardless of where the resale happens. A resale marketplace isn’t automatically liable just for hosting a listing, but a seller who knowingly flips bot-acquired tickets is within the law’s reach.
Can I report a ticket bot operator?
You can report suspected violations to the FTC at reportfraud.ftc.gov. The FTC and state attorneys general — not individual fans — bring enforcement actions under the Act.
What’s the difference between the BOTS Act and Ticketmaster flagging me as a bot?
The BOTS Act punishes bot operators — scalpers using software to hoover up tickets. Ticketmaster’s bot detection flagging you is the platform’s own anti-fraud system misfiring on a legitimate buyer. They’re opposite sides of the same war; if you’re the one being flagged, see our fix guide.
