What Is the Temu Lawsuit?
The Temu lawsuit is a group of separate state and federal legal actions against Temu's parent companies, not one single case, brought over allegations that the shopping app secretly collects personal data beyond what a retail app needs, deceives shoppers about product quality and pricing, and, in a separate federal matter, failed to disclose required seller information.
Seven states, Arkansas, Nebraska, Kentucky, Texas, Arizona and Iowa, have each filed their own consumer-protection lawsuit alleging Temu's app functions like malware, secretly harvesting location data, contact lists, and information about other apps installed on a user's phone. Separately, the U.S. Department of Justice and Federal Trade Commission brought a federal case alleging Temu failed to disclose high-volume third-party seller information as required by the INFORM Consumers Act, resolved in September 2025 for a $2 million penalty. Private consumers have also filed class actions over unwanted spam emails and text messages tied to the same data-collection practices.
PDD Holdings, Inc., formerly known as Pinduoduo Inc., and its subsidiary Whaleco, Inc., which does business as Temu, are the named defendants across the seven state lawsuits. Whaleco, Inc. alone was the defendant in the federal INFORM Consumers Act case.
“Temu is a shopping app with ties to China that covertly collects a substantial amount of personal data about Iowa consumers, well beyond what is necessary for a shopping app. Temu deceives Iowa consumers about its data-collection practices, engineering its app in a manner that is meant to hide its data exfiltration.”
Source: State of Iowa ex rel. Attorney General Brenna Bird v. PDD Holdings, Inc. f/k/a Pinduoduo Inc., and Whaleco, Inc. d/b/a Temu, Iowa District Court for Polk County, Petition (filed July 1, 2026)
Why Are People Filing Temu Lawsuits?
People are filing Temu lawsuits because state attorneys general and private plaintiffs allege Temu's app was engineered to secretly collect far more personal data than a shopping app requires, then obscure that collection from users and security reviewers. Each proceeding targets a related but distinct piece of that broader pattern.
The state lawsuits allege Temu's app, modeled on its Chinese sister app Pinduoduo, which Google suspended from its own app store in 2023 over malware concerns, collects precise GPS location, contact lists, call logs, browsing history outside the app, and data about other installed apps, generally without adequate disclosure or consent. Iowa's petition specifically alleges the app was engineered to evade security-review scrutiny and can modify its own code after installation. Several states also allege the collected data is subject to Chinese law requiring companies to share it with the government on request.
The private California spam-email case alleges Temu sent deceptive marketing emails with spoofed domains and false subject lines specifically to plant tracking pixels and cookies that funneled visitor data to outside data brokers. A separate, now-dismissed federal case alleged Temu sent unsolicited marketing text messages to numbers on the National Do Not Call Registry.
The federal DOJ/FTC case rests on a different legal theory entirely: it alleged Temu failed to clearly disclose the identities of high-volume third-party sellers and did not provide required phone and electronic reporting mechanisms for suspicious marketplace activity, a seller-transparency requirement under the INFORM Consumers Act rather than a data-privacy claim.
What Injuries Are Included in the Temu Lawsuit?
The Temu lawsuit alleges three distinct categories of harm across its separate proceedings: unauthorized data harvesting, deceptive marketing and product practices, and, in the federal case, inadequate seller-disclosure practices. Temu has denied wrongdoing in every matter and has called the state lawsuits' claims unfounded.
Unauthorized Data Harvesting
Unauthorized data harvesting is the collection of a user's personal information without adequate disclosure or valid consent, beyond what a service genuinely needs to function.
Several state lawsuits allege Temu's app collects precise location data, contact lists, call logs, device identifiers, and data from other apps installed on a user's phone, and that the app is designed with encryption and code-obfuscation techniques meant to make this collection difficult for security researchers to detect. Kentucky's and Iowa's complaints both allege the app has collected personal information from minors, including children under 13.
Deceptive Marketing and Product Practices
A deceptive trade practice, in this context, is a false or misleading representation about a product, price, or promotion made to induce a consumer purchase or click.
State complaints allege Temu displays fake or manipulated product reviews, advertises reference prices that misrepresent genuine discounts, uses gamified sign-up incentives that don't deliver as promised, and allows counterfeit goods that infringe third-party intellectual property, including, per Iowa's complaint, University of Iowa Hawkeyes merchandise. The private spam-email case separately alleges Temu sent marketing emails with spoofed domains and false subject lines, such as one advertising a “$0.01” product that the complaint calls “literally false.”
Seller-Disclosure Violations
A seller-disclosure violation, under the federal INFORM Consumers Act, is an online marketplace's failure to clearly identify high-volume third-party sellers or provide required channels for reporting suspicious activity.
The DOJ and FTC's federal complaint alleged Temu did not consistently disclose required information, such as a seller's name and physical address, for high-volume third-party sellers, and did not provide a working telephonic reporting mechanism until January 2024, more than a year and a half after the INFORM Consumers Act took effect. Temu resolved this specific matter for a $2 million civil penalty without admitting wrongdoing.
Who Qualifies for the Temu Lawsuit?
You may qualify if:
- You downloaded and used the Temu app or shopped on Temu.com in the United States and are concerned your personal data was collected without adequate disclosure (the general population several law firms are currently screening for the data-privacy claims)
- You are a California resident who received a Temu marketing email with a falsified subject line, header, or domain at a California email address (the Pottish v. WhaleCo spam-email class)
- You received unwanted Temu marketing text messages on a number listed on the National Do Not Call Registry (note: the one identified case of this kind was voluntarily dismissed in March 2025 after an individual resolution, it is not an open class)
You may not qualify if:
- You have no specific concern beyond general awareness that Temu is being sued; the seven state cases are brought by state governments, not by individual consumers, so there is no separate individual claim to join in those matters
- Your only complaint relates to Temu's product quality, shipping, or customer service rather than data privacy or the specific marketing practices described above
Temu's own terms of service include an arbitration clause, and a federal court has already ordered one nationwide data-privacy class action into individual arbitration rather than allowing it to proceed as a court class. Whether any given claim can proceed in court, in individual arbitration, or not at all depends on the specific facts and terms in effect when you used the app, only a qualified attorney reviewing your situation can confirm this.
What Is the Current Status of the Temu Lawsuit?
The current status of the Temu lawsuit varies by proceeding: the state attorney general cases remain in active pretrial litigation, the federal INFORM Consumers Act case has already resolved, and the private class actions are split between arbitration, dismissal, and early filing. No proceeding described below has reached a class-wide settlement.
State Attorney General Data Privacy Lawsuits
Seven states have each filed their own consumer-protection lawsuit against Temu since June 2024, alleging similar data-harvesting and deceptive-trade-practice violations under their own state laws. Arkansas's case, the first filed, remains active after the state formally opposed Temu's most recent motion to dismiss on August 25, 2025. Temu has denied wrongdoing in every state case and has called the allegations, in Kentucky's case, based on “misinformation circulated online” by a short seller.
| Proceeding Type | Seven separate state consumer-protection lawsuits, not a consolidated MDL |
| States and Filing Dates | Arkansas (June 25, 2024), Nebraska (June 11, 2025), Kentucky (July 17, 2025), Arizona (December 2, 2025), Texas (February 19, 2026), Iowa (July 1, 2026), Oklahoma (May 6, 2026) |
| Defendants | PDD Holdings, Inc. (f/k/a Pinduoduo Inc.) and Whaleco, Inc. d/b/a Temu |
| Status | Active pretrial litigation in every state; no case has been dismissed or settled |
DOJ/FTC Federal Case (INFORM Consumers Act)
The U.S. Department of Justice, acting on a referral from the Federal Trade Commission, sued Whaleco, Inc. in the U.S. District Court for the District of Massachusetts on September 5, 2025, over seller-disclosure failures unrelated to the state privacy lawsuits. A federal court entered a stipulated order resolving the case days later, requiring Temu to pay a $2 million civil penalty and put compliance measures in place.
| Proceeding Type | Federal regulatory enforcement action, not a private class action |
| Court | U.S. District Court for the District of Massachusetts, Case No. 1:25-cv-12466 |
| Defendant | Whaleco, Inc. |
| Resolution | $2,000,000 civil penalty under a stipulated order, entered September 8, 2025 |
Private Consumer Class Actions
At least three private class actions have targeted Temu's data practices separately from the state cases. A nationwide data-privacy class action alleging excessive collection of personal and biometric data was ordered into individual arbitration by a federal judge, who found Temu's arbitration agreement valid and enforceable. Judge Margo K. Brodie of the Eastern District of New York then denied a bid to force Temu into mass arbitration on 6,500 of those claims, dismissing all but five on March 9, 2026 because the claimants had skipped Temu's required informal dispute-resolution step. A nationwide unsolicited-text-message case under the Telephone Consumer Protection Act was voluntarily dismissed in March 2025 after the named plaintiffs reached an individual resolution with Temu. A California spam-email tracking case, Pottish v. WhaleCo Inc. d/b/a Temu.com, remains pending.
| Data-Privacy Class Action | Ordered into individual arbitration; claims from nonusers dismissed for lack of standing |
| TCPA Text-Message Class Action | Voluntarily dismissed with prejudice as to individual claims, March 10, 2025, after a private resolution |
| Pottish v. WhaleCo (Spam Email) | Filed in California; alleges falsified email headers and unauthorized tracking-pixel data collection |
Has the Temu Lawsuit Settled?
No. None of the seven state data privacy lawsuits against Temu has reached a settlement as of this writing, and no nationwide class action settlement fund currently exists for consumers to file a claim against.
The only confirmed monetary resolution to date is the $2 million civil penalty Temu paid in the unrelated federal INFORM Consumers Act case over seller-disclosure failures, which is not a fund consumers can file a personal claim against. Generally, whether and how much a future settlement might pay individual consumers, if the state cases or a private class action eventually resolve that way, depends on facts a court has not yet decided, and only a qualified attorney can offer a real estimate once more is known.
The one identified private settlement in this group of cases was an individual resolution, not a class-wide payout: the plaintiffs in the TCPA text-message case reached a private settlement with Temu on an individual basis in December 2024 before dismissing their claims, and the terms of that resolution were not made public.
Temu Lawsuit Updates
Here is the current status of the Temu lawsuit, updated with new filings, rulings, and case developments as they're confirmed. Seven state lawsuits and several private cases remain active, and the federal seller-disclosure case has already resolved.
Temu Lawsuit Timeline of Events
Oklahoma Sues Temu as the Seventh State
Oklahoma Attorney General Gentner Drummond filed suit against Temu in Cleveland County District Court on May 6, 2026, alleging the app secretly harvests device data and counterfeits Oklahoma brands including the Oklahoma City Thunder.
A Federal Judge Dismisses 6,495 Arbitration Demands Against Temu
Judge Margo K. Brodie of the Eastern District of New York denied a petition to compel arbitration on 6,500 wiretapping and privacy claims on March 9, 2026, finding all but five claimants skipped Temu's required informal dispute-resolution step first.
Iowa Sues Temu Over Data Harvesting and Consumer Fraud
Iowa Attorney General Brenna Bird filed a petition in Polk County District Court on July 1, 2026, becoming the sixth state to sue Temu, alleging the app deceptively harvests Iowans' data and separately misrepresents product quality and pricing.
Texas Sues Temu as Part of a Broader Anti-CCP Enforcement Push
Texas Attorney General Ken Paxton filed suit against Temu on February 19, 2026, the fourth in a string of lawsuits that week targeting companies Texas alleges expose residents' data to the Chinese Communist Party, seeking civil penalties under the state's Deceptive Trade Practices Act.
Arizona Sues Temu Over Data Theft and Consumer Fraud
Arizona Attorney General Kris Mayes filed suit in Maricopa County Superior Court on December 2, 2025, alleging Temu's app harvests sensitive user data, including microphone, camera, and location access, without adequate consumer consent.
Temu Resolves Federal Seller-Disclosure Case for $2 Million
A federal court in Massachusetts entered a stipulated order on September 8, 2025 resolving the DOJ and FTC's INFORM Consumers Act case against Whaleco, Inc., requiring a $2 million civil penalty and ongoing compliance measures unrelated to the separate state privacy lawsuits.
DOJ and FTC File Federal Complaint Against Temu Over Seller Disclosures
The U.S. Department of Justice filed a complaint against Whaleco, Inc. in the U.S. District Court for the District of Massachusetts on September 5, 2025, alleging Temu failed to disclose required information about high-volume third-party sellers.
Arkansas Opposes Temu's Motion to Dismiss
Arkansas formally opposed Temu's most recent motion to dismiss on August 25, 2025, keeping the first-filed state data privacy lawsuit against the company in active pretrial litigation more than a year after it was filed.
Kentucky Becomes the Third State to Sue Temu
Kentucky Attorney General Russell Coleman filed suit on July 17, 2025 after a state investigation concluded Temu collects and transfers more sensitive user data than its privacy policy discloses, including precise location and app usage data.
Nebraska Sues Temu Over Alleged Phone-Data Siphoning
Nebraska Attorney General Mike Hilgers filed suit on June 11, 2025, alleging Temu's app secretly installs malware-like code that bypasses device security and grants broad access to a user's phone, following a state investigation.
TCPA Spam-Text Class Action Dismissed After Individual Resolution
Plaintiffs in a proposed nationwide class action alleging Temu sent unwanted marketing texts to numbers on the National Do Not Call Registry filed a notice of dismissal on March 10, 2025, following a private, individual resolution reached in December 2024.
Arkansas Files the First State Lawsuit Against Temu
Arkansas Attorney General Tim Griffin filed the first state lawsuit against Temu on June 25, 2024, alleging violations of the Arkansas Deceptive Trade Practices Act and the Arkansas Personal Information Protection Act based on third-party research into the app's data practices.
Independent Research Flags Temu's App as Malware-Like
Security researchers at Grizzly Research published findings in 2023 describing code in Temu's Android app that functions like malware, shortly after Apple and Google separately restricted or suspended Temu's sister app, Pinduoduo, over similar concerns.
How to File a Temu Lawsuit
To file a Temu lawsuit, start with the 4 steps below.
- Document what the Temu app has accessed on your device: Check your phone's privacy or permissions settings for what data Temu's app has requested or collected, such as location, contacts, camera, or microphone access, and take screenshots before revoking any permissions.
- Save any deceptive marketing communications: Keep spam emails, unwanted text messages, or misleading promotional claims from Temu, including full headers where possible, since these are central evidence in the private class actions described above.
- Consult a consumer-privacy or class-action attorney: An attorney can confirm whether your specific facts fit a currently active private case, whether Temu's arbitration clause applies to your claim, and whether your state's own consumer-protection law gives you an individual right to sue.
- Watch the state and federal cases for a resolution: Because no nationwide settlement currently exists, check back for updates on the seven state lawsuits and any new private case, since eligibility for a future settlement will depend on terms a court has not yet set.
Answer a few questions and a case reviewer will follow up. Free, no obligation.
A case reviewer will follow up soon.
What Proof Do You Need to File a Temu Lawsuit?
The proof you need to file a Temu lawsuit generally depends on which specific claim applies to you, since the state cases, the spam-email case, and the dismissed text-message case each turn on different facts.
For a data-collection concern, useful documentation includes screenshots of the app's requested permissions, your phone's own privacy dashboard showing what Temu has accessed, and the dates you downloaded or used the app. For a marketing-practices concern, save the actual emails or text messages, including full headers and subject lines, along with records of whether you ever provided your contact information to Temu directly. For a counterfeit or product-quality complaint, order confirmations, product photos, and any correspondence with Temu's customer service can help establish what was promised versus what was received.
What Did Temu Allegedly Know About Its Own Data Practices?
Across the seven state lawsuits, the allegations describe the same underlying pattern: Temu built its app on the same code base as its sister app Pinduoduo, which Google suspended from its own app store in 2023 over malware concerns, and continued similar data-collection practices anyway. Temu has not been found liable in any pending matter and has denied wrongdoing, calling the state lawsuits' claims unfounded and, in Kentucky's case, based on misinformation from a short seller.
PDD Holdings, Inc., Temu's parent company, launched Temu in the United States in September 2022, modeled on Pinduoduo's existing app. Apple briefly restricted the app from its own store in 2023 amid the same security concerns, and 21 state attorneys general separately wrote to Temu's president raising concerns about illegal data collection and forced labor, though that letter itself was not a lawsuit. Arizona's complaint alleges the app is specifically engineered to evade front-end security review and can edit its own code once installed on a user's device.
How Does the Temu Lawsuit Compare to Related Cases?
The Temu lawsuit is one of several ongoing legal disputes involving the company, and it is important not to confuse them, since they involve different claims and, in one case, a different opposing party entirely. Temu itself is the plaintiff, not the defendant, in a separate antitrust lawsuit it filed against rival fast-fashion retailer Shein in 2023, alleging Shein pressured garment manufacturers into exclusive deals; that case has no connection to the data-privacy allegations described on this page.
The state data privacy lawsuits also parallel, without being formally consolidated with, similar scrutiny of other China-linked apps such as TikTok, and follow a pattern seen in the 21-state attorneys general letter to Temu's leadership that preceded the first lawsuits. Each of the seven state cases proceeds independently under that state's own consumer-protection law, so a ruling or settlement in one state does not automatically apply to another.
Frequently Asked Questions
What is the Temu lawsuit about?
The Temu lawsuit is actually several separate proceedings against Temu's parent companies, PDD Holdings, Inc. and Whaleco, Inc.: seven state attorney general lawsuits alleging illegal data harvesting and deceptive trade practices, a federal DOJ/FTC case over seller-disclosure failures, and private class actions over spam emails and text messages.
Is the Temu lawsuit a class action or an MDL?
Neither, for the seven state cases. Each is a separate state consumer-protection lawsuit brought by that state's own attorney general, not consolidated into a federal MDL or filed as a private class action. Separately, private consumers have filed their own class actions over spam emails and text messages, one of which was ordered into individual arbitration.
Who is the defendant in the Temu lawsuit?
PDD Holdings, Inc., formerly known as Pinduoduo Inc., and its subsidiary Whaleco, Inc., which does business as Temu, are the named defendants in the seven state lawsuits. Whaleco, Inc. alone was the defendant in the federal INFORM Consumers Act case.
Has the Temu lawsuit settled?
No, not the state data privacy cases. The only confirmed monetary resolution is a separate $2 million federal penalty Temu paid in September 2025 over seller-disclosure failures, an unrelated legal issue, and one private text-message case that ended in an undisclosed individual settlement rather than a class-wide payout.
Can I join a Temu class action lawsuit?
It depends on which claim applies to you. The seven state lawsuits are brought by state governments, not individual consumers, so there is no separate claim to join in those cases, while the private spam-email case remains open and a separate nationwide data-privacy case was ordered into individual arbitration rather than proceeding as a class action.
Is the Temu lawsuit the same as the Shein lawsuit?
No. Temu is the plaintiff, not a defendant, in a separate 2023 antitrust lawsuit it filed against Shein alleging anticompetitive conduct toward garment manufacturers. That case has no connection to the data privacy allegations the seven state attorneys general have brought against Temu.