A New ISO Is a Compliance Bet Before It Is a Volume Bet
No funder publishes the criteria it uses to decide whether a brand-new ISO is worth signing. That is not an oversight, it is proprietary underwriting practice, the same way a funder’s own credit box for merchant deals stays undisclosed. What can be said with real evidence behind it is what a funder is protecting itself against when it looks at a shop with no track record: compliance exposure it cannot yet see, and trust it has not had a chance to earn.
A funder that signs a new ISO is making a bet on that shop’s calling and texting practices, its submission quality, and its willingness to walk away from a marginal deal rather than force it through. None of that shows up on an application form.
The Exposure a Funder Is Screening For
TCPA class-action filings hit 507 in the first quarter of 2025 alone, up 112% year over year, according to Lexology’s tracking of the litigation trend. Roughly 80% of all TCPA lawsuits filed today are class actions, and the average class settlement now exceeds $6.6 million, per ActiveProspect’s own review of the same surge. Cold-calling and texting-heavy MCA operations sit squarely inside that exposure, and a funder signing a new ISO is, in effect, signing up for whatever calling and texting practice that shop runs.
The FTC has already shown it will act on this directly: a February 2024 judgment ordered Jonathan Braun, formerly of RCG Advances, to pay $20.3 million and permanently banned him from the MCA industry. A funder does not want its name anywhere near a shop that ends up as the next enforcement headline.
Trust Runs in Both Directions
ISOs already describe funder-side betrayal in stark terms. DailyFunder user Yankeeman07 defines backdooring plainly: a broker submits an application to a funder, and that funder’s own inside rep or underwriter quietly sells the same application to a competing shop, leaving the merchant slammed with calls from people who never earned the introduction. Resignation runs deep in the forum culture around this, brokers describe it as simply part of the business.
A funder deciding whether to sign a new ISO is weighing the mirror image of that same risk. An established shop has a submission history a funder can check. A brand-new ISO has none, which means the funder is extending exactly the kind of unearned trust brokers themselves say they rarely get from the other side of this relationship.
What a New ISO Can Show
This is reasoning, not a cited statistic. A new shop cannot manufacture a track record it does not have yet, but it can show the parts of its operation a funder can verify before the first submission: a documented consent and DNC-scrubbing process, clean submission packages with stips already in order rather than assembled after the fact, and a willingness to name exactly where its leads come from instead of staying vague about the source.
None of that replaces time in the business. It does replace the blank space a funder would otherwise be underwriting against, which is the actual gap a brand-new ISO is trying to close in this conversation.
Why This Bar Keeps Rising
TCPA filings were already climbing before 2026 arrived, and the FTC’s enforcement record shows the agency is willing to pursue individual operators for eight-figure judgments rather than settle quietly with a company. A funder evaluating a new ISO today is doing so against a litigation and enforcement backdrop that simply did not exist at the same intensity a few years ago, a real reason the bar for a first signing keeps rising, not a vague sense that funders have gotten pickier.
A new ISO walking into that conversation without an answer for how it handles consent and DNC scrubbing is walking in a step behind before the first submission ever gets discussed.
Where the Calling Practice Fits Into This
Everything above is about what a funder cannot verify on day one. A shop’s actual dialing and texting practice is the one part of this equation fully within its own control, and it is the part a funder is most exposed to if it goes wrong.
Human + AI SDRs run every merchant conversation through a documented, consistent process from the first contact, so a new ISO is not trying to reconstruct a clean compliance story after the fact, the record already exists before a funder ever asks to see it.
Sources
The external data in this article draws on the sources below. Figures described in the text as estimates or industry triangulations are directional and are not attributed to a single dataset.
- Lexology, TCPA class actions continue to skyrocket
- ActiveProspect, TCPA lawsuits explode in 2025
- FTC, court enters $20.3 million judgment against Jonathan Braun
- DailyFunder, What does backdooring mean thread