Missouri Sues Temu Over Spyware and Data Theft

Missouri Attorney General Catherine Hanaway filed a lawsuit on October 13, 2026, against e-commerce platform Temu and its parent companies, PDD Holdings, Whaleco Inc., and Temu Payments. The suit alleges the company engages in deceptive business practices, unauthorized surveillance, and aggressive data collection through an app designed to exfiltrate sensitive personal information.

The legal action claims Temu uses hidden digital tools and code obfuscation to steal personally identifiable information, including real-time GPS location and access to device cameras and microphones. Hanaway asserts that the app's source code contains spyware and malware, which may deliver the data of Missouri residents to the Chinese Communist Party under Chinese national security laws.

Beyond privacy concerns, the lawsuit alleges that Temu targets minors through gamification and child-focused advertising without age verification, granting them access to dangerous items such as weapons and drug paraphernalia. The state also claims Temu hosts unlicensed merchandise that infringes on trademarks of Missouri brands, including Anheuser-Busch and the Kansas City Chiefs.

Seeking a permanent injunction under the Missouri Merchandising Practices Act, the state is pursuing civil penalties and financial restitution for affected residents.