Decloak is an AI-powered web security intelligence platform that scans a site's HTTP/TLS posture, JavaScript, and third-party scripts to produce a report anyone can read. This guide is part of Decloak's library of practical, source-backed security guidance.
In this guide
- Key takeaways
- What does "legitimate" mean for a payment processor?
- How is Paddle legally registered?
- What services does Paddle offer?
- What regulatory actions have affected Paddle?
- Does the FTC settlement make Paddle illegitimate?
- How to verify Paddle's legitimacy yourself
- Should you use Paddle for your payments?
- Conclusion
Key takeaways
- Paddle is incorporated in the United Kingdom as PADDLE.COM MARKET LIMITED (company number 08172165) and is listed as active on Companies House.
- The company provides merchant - of - record payment processing, tax handling, compliance, and subscription billing for SaaS and digital - goods merchants.
- In June 2025 the U.S. Federal Trade Commission settled a case against Paddle, imposing a $5 million penalty and a permanent ban on processing payments for deceptive tech - support telemarketing schemes.
- Despite the enforcement action, Paddle remains a legally registered business that continues to offer payment services.
What does "legitimate" mean for a payment processor?
A legitimate payment processor is a legally incorporated entity that is registered with the appropriate corporate authority, operates a documented business model, and complies with relevant financial regulations. Legitimacy does not guarantee flawless behavior; it simply means the company exists as a recognized legal entity and provides the services it advertises.
How is Paddle legally registered?
Paddle is incorporated in England and Wales as PADDLE.COM MARKET LIMITED. The Companies House record shows:
- Company number: 08172165
- Incorporation date: 8 August 2012
- Registered office: London, United Kingdom
- Current status: Active These details can be verified on the public Companies House website, providing transparent proof of the company's legal existence.
What services does Paddle offer?
Paddle markets itself as a merchant - of - record platform. Its core services include:
- Payment acceptance for credit cards, PayPal, and local payment methods.
- Automated tax calculation and remittance for global transactions.
- Compliance handling for GDPR, PCI - DSS, and other regional regulations.
- Subscription billing and recurring revenue management. These offerings are described on Paddle's own website and are typical of payment processors that aim to simplify commerce for SaaS and digital - goods businesses.
What regulatory actions have affected Paddle?
In June 2025 the U.S. Federal Trade Commission (FTC) announced a settlement with Paddle. The FTC alleged that Paddle allowed merchants to run deceptive tech - support telemarketing schemes. The settlement required:
- A monetary penalty of $5 million.
- A permanent prohibition on Paddle processing payments for any deceptive tech - support telemarketing activities. The FTC filing confirms Paddle's existence and role as a payment processor while highlighting a specific compliance failure.
Does the FTC settlement make Paddle illegitimate?
No. A settlement indicates that the company violated a specific set of regulations, but it does not dissolve the corporate entity. Paddle remains registered, continues to operate its payment platform, and is still subject to ongoing regulatory oversight. The settlement actually adds a layer of public accountability, as the company must now adhere to the FTC's restrictions.
How to verify Paddle's legitimacy yourself
- Visit the UK Companies House website and search for PADDLE.COM MARKET LIMITED using the company number 08172165.
- Review the filing history for status, directors, and any recent changes.
- Check the FTC website for the June 2025 settlement details to understand the enforcement action.
- Look for third - party reviews or security audits that discuss Paddle's compliance with PCI - DSS and other financial standards.
Should you use Paddle for your payments?
If you need a merchant - of - record solution and are comfortable with the FTC-imposed restrictions, Paddle can still be a viable option. However, you should:
- Ensure your own compliance program monitors the types of merchants you onboard.
- Verify that Paddle's PCI - DSS compliance reports are up - to - date.
- Consider alternative processors if your business model could be affected by the FTC ban on deceptive tech - support schemes.
Conclusion
Paddle is a legally registered UK company that provides legitimate merchant - of - record payment services. The 2025 FTC settlement reflects a compliance breach but does not negate the company's legal status. By reviewing public corporate records and the FTC filing, you can confirm Paddle's legitimacy and make an informed decision about using its services.
This article is based on publicly available corporate registration data and the U.S. Federal Trade Commission settlement filing.
Related guides
Polar vs Stripe: Which payment solution is more secure?
Polar relies on Stripe for all payment processing, so its security and compliance are essentially Stripe’s. Stripe, as the processor, provides the core PCI - DSS, tokenisation, and fraud - prevention controls.
Is Polar sh a legitimate payment platform?
Polar.sh is a real, operating payment - processing service backed by investors, partnered with Stripe, and reviewed by real users, indicating it is not a scam.
Lemon Squeezy vs Polar: Which Payments API Is More Secure for Developers?
Both Lemon Squeezy and Polar act as merchants of record and expose JSON - based APIs, but they differ in compliance handling, open - source transparency, and usage - metering features.