The Address You Already Gave

Somewhere between the intro APR and the checkbox agreeing to terms you didn't read, you handed over the single fact immigration enforcement wants most: where you sleep. No warrant. No subpoena. No knock. Just a form you filled out in good faith to get two percent back on groceries.

404 Media traced the plumbing this week, and it runs exactly where you'd fear it runs. The address you gave your credit card company does not stay with your credit card company. It flows — legally, quietly, and at a markup — through a chain of data brokers and comes to rest in a commercial database that ICE queries when it wants to find a person. Every link in that chain was permitted. Every disclosure was voluntary. That is not the loophole in the story. That is the story.

We have spent a decade learning to fear the surveillance we can see: the camera, the license-plate reader, the facial-recognition contract with a menacing name. This is quieter and far more complete. Nobody hacked you. Nobody had to. You built the file yourself, one address change at a time, and the state simply bought a subscription.

i · the commons you consented away

Here is the mechanism, stripped of the marketing — and the first thing to get right is that your bank is not quite the villain the story feels like it names. Your bank didn't sell your address; it didn't have to. When you open a credit account, the bureau that scores you — Equifax, Experian, TransUnion — creates a file of its own. The financial guts of that file (balances, limits, payment history) are wrapped in the Fair Credit Reporting Act, which restricts who can pull it and why. But the top of the file — your name, your current and former addresses, your phone numbers, your date of birth — is treated as a separate, softer category the industry calls "credit header data." And credit header data has, for years, been sold far more freely than the score it sits on top of, because it was ruled not to be a "consumer report" in the FCRA sense. The identifying information is loose. Only the money is locked.

That header is the crown jewel of the data-broker economy. Brokers like LexisNexis Risk Solutions and Thomson Reuters aggregate it with hundreds of other feeds — utility hookups, change-of-address filings, vehicle registrations, marketing lists — into a single searchable dossier on nearly every adult in the country. You never signed up for the dossier. You signed up for a Visa. The dossier is the exhaust.

Understand that this is not an abuse of the system; it is the system working as designed. Assembling and selling identity dossiers is not a side effect these companies apologize for — it is the product, the revenue, the entire point. The brokers profile essentially every adult in the United States because completeness is the value proposition; a dossier with holes doesn't sell. So there is no version of "being a good customer" that keeps you out of the file, and no threshold of caution that exempts you. The moment you participate in the paperwork of modern economic life — a lease, a loan, a phone plan, a card — you are inventory. The business model requires that you be found.

And law enforcement is a paying customer. ICE has held multimillion-dollar contracts with these brokers for years — LexisNexis Risk Solutions and Thomson Reuters' CLEAR product both surfaced in reporting by The Intercept and others as pipelines the agency uses to locate people without ever generating the paper trail a subpoena would leave. Why fight a court over records when a vendor will sell you a login? The surveillance infrastructure ICE could never build itself, and could never get a warrant to assemble, already exists — privately owned, commercially maintained, and populated by the daily financial life of everyone it targets.

This is enclosure. Coherenceism has a phrase for the healthy version — own the layer, keep the commons common — and what's happening here is its exact inversion. Your identifying data is a kind of commons: the shared substrate of ordinary economic participation, generated by everyone, belonging in any decent world to the person it describes. Instead it's been fenced, aggregated, priced, and rented back to the one buyer with the power to detain you. The commons didn't disappear. It got a landlord, and the landlord took the enforcement contract.

ii · consent theater

The defense the whole system leans on is consent, and it's worth naming why that defense is theater rather than fact.

You did consent. That's true and it's the trap. You consented to give your address to a bank so a bank could mail you a card. Each disclosure, taken alone, was reasonable, bounded, and voluntary. The bank needed to reach you. You needed the account. Nothing about that single transaction was sinister, and no reasonable person reading that one agreement could have foreseen the destination — because the destination wasn't in the agreement. It was three sales downstream, in a contract you were never a party to, executed by companies whose names you'll never see on your statement.

That's the structural sleight of hand. Consent is granted at the scale of the individual transaction — one form, one purpose, one company — while the harm accrues at the scale of aggregation, where a thousand innocuous disclosures compound into a live-tracking apparatus. The moral weight lands on you ("you agreed"), but the power and the visibility sit entirely with the aggregators, who see the whole picture you were structurally prevented from seeing. You cannot meaningfully consent to a consequence that is invisible at the moment of consent. Yet the entire legal edifice pretends you did.

Call it consent theater: a performance of choice staged to launder an outcome nobody chose. It works because it exploits how humans actually reason. We evaluate the transaction in front of us, not the invisible market of our own data unfolding behind it. The system is designed — or has evolved, which functionally is the same thing — to keep the aggregate consequence permanently out of frame while collecting a signature on each individual page.

Regulators have mostly ratified this rather than challenged it. The credit-header exemption wasn't smuggled in; it was interpreted into existence and left standing for decades because the industry that profits from it is also the industry that lobbies on it. The occasional enforcement action lands on a single egregious broker for a single egregious dataset — location trails, usually — while the underlying market hums along untouched. Treating the symptom one dataset at a time, on a timeline measured in years, against an industry that re-aggregates the same data in months, is not regulation. It is weather. And notice what this does to the usual privacy advice. "Guard your data" assumes a perimeter you control. But there is no single moment of leakage to guard against here — no breach, no phishing link, no careless post. The data left through the front door, with your signature on it, for a purpose you endorsed. You cannot opt out of having an address. The advice to simply be more careful is worse than useless; it relocates responsibility onto individuals for a harm manufactured at the level of markets and law.

iii · the part that should actually scare you

The temptation is to read this as one more grim ICE story, bounded by the current politics of immigration. Resist that. The immigration angle is where the pipe happens to empty today. The pipe itself is general-purpose.

The same header data, the same brokers, the same commercial-database end-run around the subpoena, are available to any agency, any investigator, any future administration with a budget line and a grievance. What determines who gets found is not the architecture — the architecture is neutral and always open for business — but the target list, and target lists change with whoever holds the login. A system built to locate one disfavored group is a system that can locate the next one without a single new line of code. That's not a slippery-slope hypothetical. It's a description of infrastructure that already exists and is already for sale.

And this is why the obvious fixes keep glancing off. The instinct is to regulate the data field by field — lock the credit header, fence the location trail, carve out one sensitive category at a time. But go back to the industry's own tell: it re-aggregates the same data in months. Close the header exemption and the join survives, rebuilt through the utility hookups, the DMV records, the change-of-address filings, the dozen other feeds that also carry your name and where you sleep. The harm was never in any single field. It lives in the linkage. The aggregator doesn't just collect disclosures; it joins them into something that existed in none of them — a unified identity graph, a live dossier that is a categorically different object than the thousand harmless facts it's assembled from. You cannot consent to that object, because it does not exist at the moment you sign; it is manufactured later, by the join, out of pieces you released one at a time. And our law has no concept for it. It regulates data as categories — this field protected, that field open — while the power lives in aggregation as an act, the join itself, which no field-level rule can reach. You can lock every drawer in the house; the thing that hunts you is the map of which drawers are yours.

So the honest takeaway isn't "cancel your credit card." You can't, and it wouldn't matter; the header outlives the account. The takeaway is that privacy, framed as a personal discipline, is a category error. What got you here wasn't carelessness. It was participation. And the only fixes that touch the actual mechanism are structural ones that reach the join, not just the fields. Closing the credit-header exemption and warrant-gating the sale of identifying data to law enforcement are worth doing — but on their own they treat symptoms, because pull one feed and the dossier reassembles from the rest. The fix that reaches the mechanism is to make aggregation itself the regulated act: to treat the assembled identity graph as a thing the law recognizes, that consent must actually cover, and that a broker cannot build or sell without answering for the object it creates rather than the fields it happened to source. Every version of that is a fight over who owns the layer — the exact fight, at civic scale, that decides whether a commons stays common or becomes an instrument turned back on the people who made it.

Until that fight is fought and won, the arrangement stands as reported: you opened a credit card, and the state now knows where you live. You agreed to the first part. Nobody ever asked you about the second.