Honey co-founder Ryan Hudson defends extension amid fraud detection allegations

A security researcher alleges PayPal-owned Honey operated a cloud-controlled “selective standdown” in its browser extension since October 2017 to evade affiliate compliance testing and divert commissions, with archives and packet logs cited as evidence; PayPal acquired Honey for ≈$4 billion in January 2020 and Honey’s Chrome users fell from a peak >20 million to 14 million by July 2025. The probe identifies server-side rules, a master kill switch, extensive cookie monitoring and database records (85,000 coupons, ~27,000 from networks) and has spawned class-action litigation (plaintiffs resisting arbitration), raising regulatory, civil liability and reputational risks for PayPal and investors. Co-founder Ryan Hudson, now running ZeroClick (raised $55M in August 2025), denies fabrication but the allegations pose material legal and attribution risks to ad-tech and affiliate ecosystems and could influence investor and partner decisions in related ventures.

Analysis

Market structure: PayPal (PYPL) is the clear near-term loser — reputational, litigation and user-attrition risks directly threaten its wallet- and extension-driven commerce funnel; Honey’s user base falling from >20M to 14M (~30% decline) implies lost optionality for cross-sell and incremental revenue. Winners include merchant-first platforms (SHOP) and major ad platforms (GOOGL/MSFT) that can capture reallocated marketing dollars and offer first-party attribution; third‑party affiliate aggregators and fraud/attribution vendors should see demand for remediation tools.

Risk assessment: Tail risks include large civil settlements ($100M+ plausible given class scale and potential statutory penalties), regulatory enforcement (FTC/state privacy actions) and a criminal probe if wire‑fraud theories advance — these could widen PYPL equity implied vol and credit spreads materially within 3–12 months. Hidden dependencies: Honey/ZeroClick engineering talent and reused architectures raise product‑risk for ZeroClick and any investor exposure; cross‑jurisdictional privacy law triggers (EU/Australia) could accelerate fines. Catalysts: upcoming court rulings (next 3–9 months), FTC inquiries, and investor due diligence on ZeroClick are the main accelerants.

Trade implications: Favor tactical de-risking of PYPL now — expect 10–30% downside scenarios priced into 3–9 month horizon if litigation findings intensify; consider hedges rather than outright disposal for core exposure. Relative trades: long SHOP (merchant-first monetization) vs short PYPL to capture merchant re-platforming and attribution premium shift over 3–12 months. Options: use 3‑month PYPL put spreads (buy 10% OTM, sell 20% OTM) to cap hedge cost and size to cover 30–50% of position.

Key Decisions for Investors

• Reduce PYPL exposure by 30–50% over the next 2–6 weeks; simultaneously buy 3‑month PYPL put spread (buy 10% OTM, sell 20% OTM) sized to protect ~50% of remaining position to cap downside cost.
• Establish a 1:1 pair trade: short PYPL and go long SHOP (equal dollar) for a 3–12 month horizon to capture merchant re-platforming and attribution premium reallocation; trim if SHOP outperforms by >15% relative to PYPL.
• Allocate 1–2% of portfolio to GOOGL or MSFT 6–12 month call spreads (bull call spread 10% ITM to ATM) to express consolidation of AI ad monetization on trusted platforms if independent ad networks (ZeroClick) falter.
• If implied volatility in PYPL rises >40% on legal headlines, increase hedge by purchasing additional 3–6 month PYPL 7.5% OTM puts or widen put spread size to cover 75% of net exposure; unwind gradually after a definitive court ruling or settlement (>90 days).