When the circulatory system goes silent
ActBlue processed $1.8 billion across 52 million contributions in 2025, serving nearly 23,000 Democratic candidates and groups through a database holding millions of stored credit card numbers [2]. On Wednesday, the CEO of that infrastructure invoked her Fifth Amendment right against self-incrimination before the House Administration Committee after her own lawyers warned she might have misled Congress about how the organization vetted foreign donations [1][2].
The question isn't whether Regina Wallace-Jones broke the law. The question is what happens when the dominant payment processor for an entire political party, an organization that has raised nearly $19 billion since 2004 [2], faces a choice between transaction volume and verification security, then chooses volume.
The machine made choices
In February 2025, the law firm Covington & Burling delivered an internal memo to ActBlue identifying legal risks that the organization "could be alleged to have accepted foreign-national contributions in violation of federal law" [3]. The memo came after ActBlue had made donation standards "more lenient" twice during the 2024 election year [3]. Card verification value rules, the three-digit CVV codes on the back of credit cards, had been lax for contributions from credit, prepaid debit, or gift cards [3].
CVV verification exists because it proves physical possession of a card. Without it, anyone with a stolen card number can make purchases. Prepaid cards matter because they're harder to trace than bank-issued credit cards, they can be purchased with cash, loaded with funds, and used without connecting to a verified identity. For political donations, that creates a pathway: foreign nationals prohibited from contributing to U.S. campaigns could theoretically use prepaid cards with lax verification to funnel money through what appears to be domestic transactions.
Texas investigators tested this pathway. They successfully made donations under fake identities [3].
Three months after the Covington & Burling memo, three ActBlue lawyers departed: former general counsel Darrin Hurwitz, ex-director Aaron Ting, and former counsel Zain Ahmad [2][3]. All three were later subpoenaed by congressional committees investigating ActBlue's fraud-prevention practices [3]. All three invoked their Fifth Amendment rights in depositions between July and December 2025 [3].
The arithmetic of silence
ActBlue employees invoked their Fifth Amendment right at least 146 times across depositions with House committees [3]. Two current officials and the three former lawyers declined to answer a single substantive question [3]. An ActBlue senior workflow specialist managing fraud prevention and former vice president Alyssa Twomey received subpoenas in June 2025 [3]. They joined the silence.
Wallace-Jones announced her intention to take the Fifth in an opinion essay published in The Washington Post before her Wednesday testimony [1][2]. The move is unusual, most witnesses who invoke constitutional protections do so quietly, through their attorneys, without public explanation. Wallace-Jones chose transparency about her refusal to be transparent, a paradox that underscores the tension between ActBlue's public posture and its private legal strategy.
The organization has repeatedly denied wrongdoing and maintained it has "always been forthcoming with Congress" [2]. Yet House committees accused ActBlue of withholding materials responsive to subpoenas [2]. House Administration Chairman Bryan Steil, Oversight Chairman James Comer, and Judiciary Chairman Jim Jordan requested additional information about fraud-prevention practices for foreign donations dating back to 2020 [3].
What does forthcoming mean when 146 invocations stand between questions and answers?
Why looser became necessary
Political fundraising infrastructure operates under competitive pressure that intensifies during election years. Candidates need money fast. Donors want frictionless giving. Every additional verification step, entering a CVV code, confirming an address, waiting for a bank authorization, adds seconds to a transaction and increases the likelihood a donor abandons the contribution.
ActBlue isn't a neutral utility. It's a business serving clients who need speed. When donation standards became "more lenient" twice in 2024, the organization was optimizing for what its customers wanted: faster money. The alternative, tighter security that slows processing, risks losing market share to competitors willing to move faster.
That calculation works until it doesn't. Texas Attorney General Ken Paxton sued ActBlue alleging "rampant donor fraud" based on congressional committee findings and his office's investigations [3]. The lawsuit followed successful test donations under fake identities, demonstrating that the lenient verification standards weren't just theoretical vulnerabilities, they were exploitable holes [3].
The February 2025 memo from Covington & Burling arrived after the 2024 election, after the standards had been loosened, after the money had been processed. The legal risk assessment came too late to change what had already happened. Three lawyers read that assessment and left.
The infrastructure survives its architects
ActBlue continues operating. The 23,000 candidates and groups who used it in 2025 still need a payment processor [2]. The millions of credit cards in its database remain stored, ready for the next contribution cycle. The system doesn't stop because its CEO takes the Fifth or its lawyers invoke constitutional protections.
That's what makes this a systems story rather than a scandal story. Regina Wallace-Jones may or may not have misled Congress, her lawyers' warning suggests she might have, but warnings aren't convictions [1][2]. The three departed lawyers may have seen legal exposure or simply decided to leave a difficult situation. The 146 Fifth Amendment invocations may reflect genuine criminal risk or an abundance of legal caution.
What's certain is the choice ActBlue made when it loosened verification standards during an election year. Political infrastructure bent under competitive pressure, prioritizing transaction volume over verification security. The machine optimized for speed because that's what the market rewarded.
Now the machine runs on while everyone who built it refuses to explain how it works. The $19 billion circulatory system of Democratic politics processes contributions through verification standards that Texas investigators exploited with fake identities, governed by executives who invoke constitutional protections against self-incrimination when asked about foreign donation risks their own law firm identified in an internal memo.
The silence isn't the scandal. The silence is what happens after the system makes its choices and someone finally asks why.
