Legality, Trust & Compliance

MLM Rules and Regulations: What a Company Has to Get Right

Compliance in this industry is not one rule. It is six separate surfaces, each with a different regulator and a different failure mode, and most of them are decided by what the software records at the moment of a sale rather than by a policy document.

This is general information about where the rules sit and what they require operationally. It is not legal advice. Direct selling regulation differs by country and, in the United States, by state. Take advice from a lawyer who practises in your markets before you launch anything.

There is no single MLM statute in most markets, which is why “is it legal” is the wrong shape of question. Six separate regulatory surfaces apply at once, each with a different regulator and a different failure mode.

Most of them are decided by what the software records at the moment of a sale, not by what a policy document says.

The six surfaces

SurfaceThe requirementWhere it fails
Income representationclaims substantiated, disclosure availablea slide with a hypothetical structure presented as typical
Product claimsclaims within what the evidence and the market permita distributor repeating a claim the company never made
Source of revenuemeaningful sales to people who are not participantsno order classification, so the question cannot be answered
Contractor classificationindependence in substance, not only in the contracttools and behaviour that look like supervision
Data protectionlawful basis, consent, retention limits, subject rightsa genealogy accumulating personal data forever
Payments, tax, consumer rightscorrect reporting, cooling-off, returns and buybackpolicies that exist but are not enforced by the system

1. Income representation

Any statement about what participants earn is a claim that has to be supportable. In practice three things follow:

  • An income disclosure statement, published, current, and available before somebody enrols rather than after.
  • The median rather than the mean, and a denominator that includes everybody who enrolled, not only those who qualified for something.
  • Generated, not compiled. The figures should come out of the commission data by a repeatable process. A disclosure assembled by hand in a spreadsheet each year is a document nobody can reproduce, which is the wrong property for the one document whose accuracy is most likely to be examined.

The recurring failure is not a fraudulent number. It is a lifestyle-shaped implication — a slide showing a hypothetical organisation and the arithmetic of what it would pay, presented without the context that almost nobody builds it.

2. Product claims

A claim about a health product is regulated speech in nearly every market, and in this model it is made by thousands of people the company does not employ.

The control that works is an approved-claims library framed as a permission: here is what you may say about this product, in this market, with the evidence behind it. A prohibition list asks people to remember what not to say, which fails at scale. A permission list gives them something to use, which is what they actually wanted.

Two mechanical requirements follow: claims are per market, because clearance differs, and the library has to be versioned, so what was approved at the time somebody said it is recoverable.

3. Source of revenue

This is the question behind pyramid-scheme law everywhere, and it reduces to one thing: does the company sell meaningfully to people who are not participants?

Answering it requires classification at the point of sale — retail customer, subscribed or preferred customer, distributor purchase. That record is the evidence, and it is the one record that cannot be built later. An orders table without the column produces a company that genuinely cannot answer a question about its own history.

Two supporting mechanics belong in the same conversation:

  • Inventory loading controls. Ordering patterns that suggest purchasing to qualify rather than to sell should be visible in reporting, not discovered in a complaint.
  • A real buyback and return policy, applied by the system rather than by discretion — including for somebody leaving with unsold stock.

MLM versus pyramid scheme covers the legal distinction, and why pyramid schemes fail covers the arithmetic underneath it.

4. Contractor classification

Participants are independent contractors. Whether that holds is assessed on substance, and the substance includes the software.

Features that look like supervision become evidence of supervision: scheduling, shift assignment, time tracking, mandated activity, upline approval of what somebody sells. Well-built distributor tools deliberately omit them. What they do contain is reporting, training material and recognition — support without direction.

The distinction is not cosmetic. A platform that lets an upline assign work to a downline has introduced a management relationship into a structure whose entire legal basis is that no such relationship exists.

5. Data protection

A direct selling company holds an unusual quantity of personal data about people who are neither employees nor ordinary customers, and the genealogy makes relationships between them explicit and permanent.

The operational requirements are the same everywhere even though the statutes differ:

  • a stated lawful basis for each processing purpose,
  • consent recorded as an event with timestamp, version and scope — not a boolean that gets overwritten,
  • retention limits that actually delete, because accumulation is the exposure,
  • subject access, correction and deletion that can be executed without breaking the tree,
  • cross-border transfer handled deliberately once you operate in more than one market.

In the United States this varies by state. In South Africa it is POPIA, and the deletion requirement genuinely conflicts with a naive “keep everything” genealogy design, which is why it belongs in the schema conversation rather than the policy conversation.

6. Payments, tax and consumer rights

  • Contractor tax records per market, produced from the same data that produced the payment.
  • Cooling-off rights on enrolment and on orders where local law provides them, enforced by the system rather than granted on request.
  • Returns and buyback, with commission reversed through the same tree that paid it, including when the wallet has to go negative to recover it.
  • Payment verification before money moves. A commission run that pays a wrong amount is a recovery problem across thousands of individuals, which is a materially worse problem than a delayed run.

Working checklists

At launch, before the first enrolment

  • Plan document versioned, dated, and stored as the artefact the software runs from
  • Order classification implemented at checkout, immutable afterwards
  • Commissionable volume held per product, separately from price, tax and shipping
  • Sponsorship and placement stored as two distinct relationships
  • Distributor agreement with a versioned acceptance record per person
  • Income disclosure process defined, generated from commission data
  • Approved-claims library, per market, versioned
  • Return, buyback and cooling-off rules implemented in the system
  • Retention schedule defined per data category, with deletion that runs
  • Product availability enforced on ordering and on volume, per market

Each commission period

  • Run reconciles: total paid equals the sum of components, and the payout ratio is within the modelled band
  • Rule set version stored with the run, so a closed period reproduces exactly
  • Exceptions reviewed before payment, not after — caps hit, negative wallets, unusual jumps
  • Reversals from returns applied through the tree that paid them
  • Payment file verified against the run totals before release

Monthly

  • Non-participant revenue proportion calculated and recorded
  • Ordering-pattern review for purchasing that looks like qualification rather than sale
  • Field material sampled for income and product claims
  • Opt-outs and suppression confirmed to be honoured across every channel
  • Complaints and chargebacks reviewed for a pattern rather than case by case

Per new market

  • Local counsel engaged before any enrolment is accepted
  • Product clearance per product, and availability enforced both ways
  • Plan thresholds and settlement currency decided deliberately
  • Claims library localised, not translated
  • Data transfer basis documented
  • Tax and contractor reporting confirmed against local requirements

If you are checking a company rather than running one

Four questions, and the manner of the answer is itself informative:

  1. What proportion of revenue comes from customers who are not participants, and how is it measured? A company that tracks this classifies its orders properly. A refusal is an answer.
  2. Where is the income disclosure, and what is the median? Not the top ranks. The median across everybody who enrolled.
  3. What is the return and buyback policy for somebody leaving with stock? And is it applied by the system or by request.
  4. Are the product claims specific and sourced? “Supports normal immune function, per the ingredient dossier” is a claim somebody stands behind. A testimonial is not a claim about the product.

MLM schemes explained sets out the public sources for checking a specific company in the US and South Africa, and how to start an MLM company covers the sequence in which these decisions have to be made.

All articles

FAQ

Questions operators ask before they switch

Straight answers on plan mechanics, migration risk and compliance. If yours is not here, ask us directly.

What are the main rules an MLM company has to follow?

There is no single MLM statute in most markets. Instead six separate areas apply at once, each with its own regulator. Income representation, where any earnings claim has to be substantiated and usually accompanied by disclosure. Product claims, especially health claims, which are regulated speech in nearly every market. The source of revenue, which is the question behind pyramid-scheme law — whether the company sells meaningfully to people who are not participants. Contractor classification, where behaving as an employer creates an employment relationship regardless of the agreement. Data protection, which in the United States varies by state and in South Africa is governed by POPIA. And payments, tax reporting and consumer rights such as cooling-off and buyback provisions. This is general information and not legal advice.

What is the single most important compliance record?

The classification of each order at the point of sale — retail customer, subscribed or preferred customer, or distributor purchase. Everything in the retail-revenue question depends on it, and it is the one record that cannot be reconstructed afterwards. If an orders table never had the column, no analysis of historical data will produce it, and a company being asked what proportion of its revenue came from non-participants will be unable to answer about its own past. Classification is a schema decision made before launch, not a report someone can build later.

Do policies and procedures actually change field behaviour?

On their own, very little. A policy document is read once by a minority of the field and recalled by fewer, so a company relying on it to control what thousands of independent people say is relying on the weakest available mechanism. What changes behaviour is making the compliant path the easiest path: approved claims and copy that are better than what a distributor would write, sending routed through tooling that records consent and honours opt-outs, income figures generated from actual data rather than typed into a slide, and monitoring that finds problems while they are still small. The policy document remains necessary — it is the basis for enforcement — but it is the record of the rule, not the mechanism that produces compliance.

How do I check whether a specific company is compliant?

Ask four questions and treat the manner of the answer as data. What proportion of revenue comes from customers who are not participants, and how is that measured. Where is the income disclosure statement, and what does the median show rather than the top ranks. What is the return and buyback policy, including for someone leaving with unsold stock. And are the product claims in the material specific and sourced, or general benefit language and testimonials. A company that tracks the first number is a company whose orders are classified properly. A company that cannot find its income disclosure has told you something about how income is discussed internally.

More on Legality, Trust & Compliance

Legality, Trust & Compliance

Why Pyramid Schemes Fail

A pyramid scheme does not fail because it was run badly. It fails because the only thing funding it is new participants, and every level needs more of them than the level before. The collapse is scheduled from the first day; only the date is uncertain.

Legality, Trust & Compliance

Is MLM Legal in the USA?

Yes — direct selling is a lawful business model in the United States, and specific plans within it are routinely found unlawful. The distinction is where compensation comes from, and it has to be evidenced rather than asserted.

Legality, Trust & Compliance

Is MLM Legal in South Africa?

Yes — and South Africa's Consumer Protection Act names multiplication and pyramid schemes explicitly, while POPIA governs every piece of distributor data you hold. Two regimes, both with real consequences, and both operational rather than theoretical.

Ready to Transform Your Direct Selling Business?

Send us your plan rules and we will run a live commission cycle against them, on your numbers, before you commit to anything.

  • Configured in a sandbox before the call, usually within two business days
  • No slide deck and no card — you watch your own plan pay out
  • Your plan document stays confidential and is deleted on request

Prefer a longer conversation? Open the full enquiry form

required

Prefer email? Write to us at sales@mlmsoftwarepro.com