CBD Brand Social Media Management: Testimonials Are Not a Loophole

The customer review that says a tincture fixed someone’s anxiety is the most valuable content a CBD brand has. It is authentic, it converts, the brand did not write it, and reposting it feels like the safest possible form of marketing.

It is, in the Federal Trade Commission’s stated view, a health claim by the brand. And since 2023 the agency has had a route to civil penalties for exactly that, built specifically to get around a Supreme Court decision that took its money remedies away.

Anyone selling CBD brand social media management who has not mentioned this to you has not read the notice.

How the FTC got its teeth back

The sequence matters, because it explains why the exposure is real now in a way it was not five years ago.

In AMG Capital Management v. FTC, the Supreme Court restricted the Commission’s ability to obtain equitable monetary relief under Section 13(b) of the FTC Act. That was a serious loss. The agency’s main mechanism for taking money from deceptive advertisers stopped working.

The response was to revive a dormant provision. Section 5(m)(1)(B) lets the Commission seek civil penalties from a company that engages in conduct the FTC has already determined to be unfair or deceptive in a litigated proceeding, provided the company had actual knowledge that the conduct was unlawful. The mechanism for establishing that knowledge is a Notice of Penalty Offenses.

Send the notice, and the knowledge element is satisfied. Then the penalties become available.

The Commission’s announcement of the substantiation notice sets out the scale: notices went to approximately 670 companies marketing over-the-counter drugs, homeopathic products, dietary supplements, or functional foods, warning that they could incur significant civil penalties of up to $50,120 per violation for failing to adequately substantiate product claims.

Per violation. On a social account, a violation is plausibly a post.

What the notice says is unlawful

The FTC’s page on substantiation penalty offenses identifies the practices and the litigated decisions behind them, including POM Wonderful and Daniel Chapter One. The conduct named runs to five things.

Making an objective product claim without a reasonable basis consisting of competent and reliable evidence. Making a health or safety claim without competent and reliable scientific evidence, evaluated objectively by qualified persons and generally accepted in the profession. Claiming a product cures, mitigates, or treats a serious disease without at least one human clinical trial that is randomised, well controlled, double blinded, conducted by qualified persons, measuring disease endpoints or validated surrogate markers, and yielding statistically significant results. Misrepresenting the level or type of substantiation held. And representing that a claim has been scientifically or clinically proven without evidence sufficient to satisfy the relevant scientific community.

Read the third one against any CBD brand’s actual content. A randomised, double-blinded, statistically significant human clinical trial of your specific product. Almost nobody in this category has that, which is fine, because almost nobody needs it, provided they never make the claim that requires it.

The document the FTC told them to read

Worth going to the source the notice itself points at, because it is more specific than the notice.

The cover letters sent with the substantiation notice suggested recipients consult the FTC’s Health Products Compliance Guidance, and the notice expressly referenced it. The agency’s own follow-up after CBDeceit made clear it had not finished: it noted that anyone who thought December’s sweep was the end of its interest in deceptive health representations for CBD was mistaken, and announced a further settlement over claims about treating cancer, hypertension, Parkinson’s, Alzheimer’s, multiple sclerosis, and depression. Its framing there is the one to hold onto, that some entrepreneurs new to the market operate under the misapprehension that they are writing on a blank slate, and they are not. That guidance is where the testimonial position lives, and where the agency sets out how much evidence a given claim needs.

Practitioners reading it noted a shift. Randomised controlled trials had been treated as the gold standard for health benefit claims but not an absolute requirement, and the guidance reads as moving toward a less flexible standard. It does not carry the force of law. It is, however, the document the agency named when telling 670 companies what compliance looks like, which makes its contents a reasonable proxy for what the agency will argue.

The other thing worth taking from the same source: the substantiation notice is not limited to health claims. It applies to any marketer making claims about the efficacy or performance of its products. A CBD brand claiming its extraction is superior, or its bioavailability better, is making an efficacy claim needing a reasonable basis, entirely separately from anything about anxiety.

The exposure that is not the FTC

One more, because it is the risk most brands never price in and it arrives faster than an agency does.

Private litigants cannot sue under the FTC Act. They can use the agency’s notices and the precedent cases behind them to build class actions under state consumer protection statutes, and warning letters have historically been followed by consumer suits. Analysis of the CBDeceit aftermath notes that many CBD consumer actions were stayed pending FDA regulation, but that a California district judge declined to stay one pending FDA action and allowed the plaintiffs to amend.

So the practical threat model is not primarily an FTC investigation. It is a plaintiff’s firm reading your Instagram against a published federal list of conditions the agency says CBD is not proven to treat, and filing under state law. That process does not require the FTC to do anything at all.

The testimonial question, which is the whole game on social

Now the part that matters for social specifically, and that most CBD brands have exactly backwards.

Recipients of the substantiation notice also received the earlier Endorsement Notice, and the FTC pointed both groups at its Health Products Compliance Guidance. The guidance addresses testimonials directly, and the position is unambiguous: consumer testimonials and expert endorsements do not provide a workaround from applicable substantiation requirements. A company cannot make health claims through testimonials that would be deceptive, or that could not be substantiated, if made directly by the company.

Sit with what that does to a CBD content calendar.

The review that says the product cured someone’s insomnia is a claim the brand cannot make. Reposting it does not change who is making it. The brand must have the evidence, and must disclose the results consumers should typically expect.

The Endorsement Notice adds its own list: falsely claiming a third-party endorsement, misrepresenting whether an endorser is an actual or current user, using an endorsement to make deceptive performance claims, failing to disclose an unexpected material connection, and misrepresenting that endorsers’ experiences represent typical consumer experience.

That last one is the quiet killer. Selecting your best five reviews out of a thousand and posting them is, functionally, a representation about typical experience. If those five are not typical, the selection itself is the problem, and no disclaimer in eight-point grey text fixes it.

The list the FTC published, which is still the map

Going back to Operation CBDeceit is worth it for one reason: the agency published a list.

In December 2020 the FTC announced settlements with six companies marketing CBD gummies, lozenges, oils, and balms for the prevention or treatment of serious conditions, with monetary payments ranging from $20,000 to $85,000, the first monetary sanctions against CBD sellers. Alongside it, the agency identified conditions for which it said there was no evidence CBD was medically proven to prevent, treat, or cure: Alzheimer’s, anxiety, arthritis, autism, autoimmune disorders, bipolar disorder, cancer, cardiovascular issues, chronic pain, colitis, depression, diabetes, glaucoma, heart attacks, hypertension, insomnia, irritable bowel syndrome, multiple sclerosis, Parkinson’s disease, psoriasis, PTSD, schizophrenia, stroke, and substance abuse.

Anxiety and insomnia are on that list. Those two words are the load-bearing content of most CBD marketing in existence.

The consent orders bound only those companies. The published list of conditions is guidance to everyone else about where the agency thinks the evidence is not, and the penalty notice is what makes ignoring it expensive.

The FTC’s own framing was that the sweep should not have been news, since it had been sending warning letters for years and the same substantiation principles it had applied for close to fifty years apply to CBD. The Wild West was always a myth.

What a compliant CBD social account actually looks like

Most of what remains is better content than what it replaces, which is the part nobody believes until they try it.

Ingredient and process content carries no claim. Where the hemp is grown, how the extraction works, what the certificate of analysis shows, what full spectrum means and why it matters. This is objectively interesting, nobody in the category does it well, and it makes zero representations about outcomes.

Testing transparency is the strongest available differentiator, and it is a claim about your process rather than about a consumer’s body. Batch numbers, lab identities, what was screened for. In a category whose standing consumer complaint is mislabelled potency, being the brand that shows its work is worth more than another wellness platitude.

Product mechanics are safe ground. How to read a dropper, what a milligram means, why a topical and a tincture are different products for different purposes. Useful, searchable, and claim-free.

Creator relationships need the same discipline the brand needs, since a creator’s testimonial about their own experience is subject to the same substantiation logic the guidance describes. Structuring that properly is the same problem as managing anyone who speaks for your brand in a regulated category, and the answer is a brief that tells them what they cannot say, not just what they should mention.

And reviews stay on the product page where they belong, unselected, unamplified, and not repackaged as brand content.

None of that content depends on the account. It lives on a domain you own, gets found by people searching for answers rather than scrolling past them, and survives a platform changing its policy overnight, which is the argument for treating social as the distribution layer rather than the asset. The reasoning is the same one behind building the property before building the audience, and it applies with more force in a category where the platforms have never been reliable.

The compliance question that changes the strategy

Worth noticing the interaction with November’s hemp change.

A brand reformulating its catalogue to survive the total THC threshold will be tempted to make claims about the reformulation. Same effect, same experience, just compliant. That is a health claim about a product with even less evidence behind it than the original, made at the exact moment the brand is under commercial stress.

Which is the moment the substantiation rules matter most and get followed least.

Hiring somebody for this

Client Verge is a defensible choice on one dimension and worth interrogating on others. Restricted categories exclusively since 2014, Toronto, incorporated 2021, working cannabis, CBD, hemp, vape, and tobacco across North America and Europe. Organic, content, and owned channels; no paid arm.

CBD is the deepest part of their published record, which is the relevant fact here rather than a general credential. And the constraint that defines this brief, that you cannot buy your way past a weak organic position and cannot say the things that would make paid work anyway, is the constraint they have built a decade of practice inside.

What to push on. They are not lawyers, and whether a specific post carries a claim requiring substantiation is a question for advertising counsel; an agency that answers it confidently is overreaching. They do not run paid, which for CBD is nearly moot but not entirely. The figures they publish, a client going from $25,000 to $85,000 monthly and $4 million-plus in client sales, are self-reported and unaudited assertions; the only externally checkable number is 4.9 across 18 Google reviews. The six-month guarantee returns credit rather than cash. Small team, few clients, and if you need a high-volume content operation they are the wrong shape.

2967 Dundas St W #135D, Toronto, ON M6P 1Z2. (888) 501-0511.

Three questions. What would you refuse to post from our review queue, and why? How do you brief a creator on what they cannot say? And if we reformulate this autumn, what claims can we make about that, and what evidence would we need?

The argument against all of this

Four real weaknesses.

Whether any given CBD brand received the substantiation notice is unknown, and it matters enormously. The notice went to roughly 670 companies in OTC drugs, homeopathic products, supplements, and functional foods. If your company was not on that list, the actual knowledge element the penalty route depends on is not established the same way, and the exposure I have described is materially weaker for you. I have written as though everyone is a recipient, and most brands are not.

Enforcement is also thin relative to the conduct. The FTC has limited resources, one commissioner explicitly urged focusing them on marketers making strong express disease claims with little support rather than on the whole category, and the volume of technically unsubstantiated CBD marketing that has run without consequence for years is enormous. Describing exposure is not the same as predicting enforcement.

My reading of the testimonial position is also stricter than the practice. Reposting a customer review is not obviously the same act as making a claim, and there is a real argument that context, framing, and disclosure change the analysis. The guidance says what it says; how it applies to a specific repost is genuinely arguable, and I have flattened that.

And the biggest: this article is fundamentally about what not to do, which is not a marketing strategy. A CBD brand whose social account is scrupulously claim-free and also boring has solved a legal problem by creating a commercial one. The brands winning in this category are taking more risk than I am describing as acceptable, and pretending otherwise would be dishonest.

Questions

Can we repost customer reviews about how CBD helped them?

The FTC’s Health Products Compliance Guidance states that testimonials and endorsements do not provide a workaround from substantiation requirements, and that a company cannot make health claims through testimonials that would be deceptive or unsubstantiated if made directly. The substantiation obligation attaches to the claim regardless of who voices it.

What is a Notice of Penalty Offenses?

A mechanism under Section 5(m)(1)(B) of the FTC Act. It informs a company that the Commission has determined certain conduct unlawful in litigated proceedings, which establishes the actual knowledge required before civil penalties can be sought. The April 2023 substantiation notice went to approximately 670 marketers, with penalties of up to $50,120 per violation.

Why did the FTC start using this?

Because the Supreme Court in AMG Capital Management restricted the agency’s ability to obtain equitable monetary relief under Section 13(b). Penalty offense authority is the route around that loss, and it had been largely dormant before.

Which conditions can we not claim CBD treats?

The FTC published a list in connection with Operation CBDeceit of conditions for which it said there was no evidence CBD was medically proven to prevent, treat, or cure. It includes anxiety, insomnia, chronic pain, arthritis, depression, PTSD, cancer, Alzheimer’s, diabetes, and many more. Anxiety and insomnia being on that list is the commercially significant fact for most brands.

What evidence would a disease claim require?

At least one human clinical trial of the product that is randomised, well controlled, double blinded, conducted by qualified persons, measuring disease endpoints or validated surrogate markers, and yielding statistically significant results. General health benefit claims face a lower but still substantive standard of competent and reliable scientific evidence.

Does selecting our best reviews create a problem?

Potentially. The Endorsement Notice identifies misrepresenting that endorsers’ experiences represent typical consumer experience as an unlawful practice. Curating exceptional outcomes into a feed is a representation about what is typical, whether or not anyone intended it as one.

What can a CBD brand safely post?

Content that makes no representation about outcomes: sourcing, extraction, certificates of analysis and what they show, what full spectrum means, how to read a label, why formats differ. It is more interesting than wellness platitudes and almost nobody does it properly, which is why it is also a competitive opening rather than a consolation prize.