“While this knowledge requirement may be intended to prevent strict liability against third parties who supply goods or services, we are concerned that it lacks sufficient clarity and could expose legitimate firms to inappropriate penalties,” the Financial Technology Association told the agency.