Starbucks is changing the way it says thanks: a fresh take on Rewards

If your Starbucks app buzzes on March 10, it won’t just be about a new promo — it will be the moment a longtime loyalty program gets a clear makeover. Starbucks’ newly reimagined Rewards program introduces tiered levels, faster earning, and some perks that feel designed to solve the small frustrations members have been vocal about for years. For anyone who visits Starbucks regularly (or wants to), this is more than cosmetic — it’s a strategic push to make loyalty feel personal again.

Why this matters now

• Starbucks Rewards accounted for a huge share of U.S. revenue in fiscal 2025 and had more than 35 million active 90‑day members. The program is a major growth lever for the company. (about.starbucks.com)
• The company says the redesign comes straight from member feedback — particularly around how Stars are earned, how long they last, and how quickly members can redeem tangible value. (investor.starbucks.com)
• Launch date: March 10, 2026 — members will see their assigned level in the app and by email, based on Stars earned in calendar 2025. All existing Stars remain in accounts. (investor.starbucks.com)

A quick tour of the new tiers

• Green

  • Entry-level benefits: birthday reward, personalized offers, early access to select items.
  • New perks: Free Mod Mondays (one complimentary customization on a select Monday each month).
  • Stars validity: Stars are valid for six months, but monthly activity (purchase, redemption, or reload) extends them for an extra month.
  • Earning: 1 Star per $1, plus bonuses for digital reloads. (investor.starbucks.com)

• Gold

  • Threshold: 500 Stars in a 12‑month period.
  • Perks: All Green benefits, Stars never expire, a seven‑day window to redeem birthday treat, 1.2 Stars per $1 (12 per $10), and at least four additional Double Star Days per year. (investor.starbucks.com)

• Reserve

  • Threshold: 2,500 Stars in a 12‑month period.
  • Perks: All Green and Gold benefits, a 30‑day birthday redemption window, at least six additional Double Star Days, exclusive merchandise and curated events (even travel experiences), and 1.7 Stars per $1 (17 per $10). (investor.starbucks.com)

What’s new (and what actually changes for members)

• Faster earning tied to engagement rather than payment method. That simplifies earning logic and rewards frequent spenders more clearly. (investor.starbucks.com)
• A new 60‑Star redemption tier: $2 off any item — a lower, quicker access point to rewards that makes small wins possible sooner. Other tiers remain but are updated: 25 Stars for customization up to $1 value, 100 for brewed coffee/food, 200 for handcrafted beverages/ breakfast, etc. (investor.starbucks.com)
• Better treatment of Star expiration: Gold and Reserve members’ Stars never expire; Green members can keep Stars active with simple monthly activity. (investor.starbucks.com)
• Cross‑program linkups: select partnerships (Delta SkyMiles, Marriott Bonvoy) can be linked to unlock additional benefits. (investor.starbucks.com)

Why Starbucks is making these moves

• Business rationale

  • Loyalty members already drive a disproportionate share of revenue. Small behavioral nudges — more personalized offers, a tier to strive for, and clearer, faster rewards — can increase visit frequency and basket size. (about.starbucks.com)
  • The tier design creates aspirational goals (Gold → Reserve) that motivate incremental spend and repeated engagement. (investor.starbucks.com)

• Customer experience rationale

  • Simpler earning, a lower barrier to redeeming value, clearer expiration rules, and a monthly “free mod” are direct responses to common complaints. That’s likely to placate some frustrated members and make the program feel fairer. (about.starbucks.com)

Possible frictions and watch points

• Reserve looks expensive to reach. Earning 2,500 Stars in 12 months will require substantial spend for many customers; the perceived value must match the effort, otherwise the tier risks feeling out of reach or purely aspirational. Observers have already noted this may favor high-frequency buyers. (axios.com)
• Operational clarity at launch matters. Any confusion in how Stars were counted for 2025 (used to seed initial tier assignments) or in app displays could cause customer service headaches. Starbucks says existing Stars remain, but how that translates to visible tiers on March 10 will be crucial. (investor.starbucks.com)
• Margin tradeoffs. Giving more frequent low-cost redemptions (60‑Star $2 off) and free customizations could compress margins if not offset by higher frequency or higher spend per visit.

What this means for different members

• Casual visitors: greener perks and a faster path to a $2 discount make the program more tangible without heavy commitment.
• Regulars: Gold’s non‑expiring Stars and extra Double Star Days reward steady behavior and reduce the anxiety of “use it or lose it.”
• Super‑fans: Reserve promises exclusive experiences and faster earning — great for brand devotees and those who treat Starbucks as a lifestyle spend.

My take

This redesign feels smart and evidence‑based. Starbucks leaned on scale and customer feedback to simplify earning mechanics, add smaller but meaningful redemptions, and create aspirational tiers. The structural changes favor engagement: a lower redemption threshold, regular small perks (Free Mod Mondays), and non‑expiring Stars for higher tiers all reduce friction and increase perceived fairness.

The key to success will be execution. If Starbucks communicates clearly, ensures the app experience reflects member value instantly on March 10, and leans into the Reserve perks without making them purely theatrical, the program could deepen loyalty and help nudge more visits into repeat visits and larger baskets. If, instead, the Reserve tier feels unattainable or the new cross‑program links create complexity, some members may see the changes as rearranging the deck chairs.

Final thoughts

Loyalty programs live or die on clarity and perceived value. Starbucks’ reimagined Rewards addresses both: simpler earning, faster wins, and tiers that reward commitment. For the average coffee buyer, the immediate gains (60‑Star $2 off, Free Mod Mondays, clearer expiration rules) are tangible. For Starbucks, the gamble is that these choices will translate into more frequent purchases and deeper brand attachment — and with over 35 million active members, even small behavioral lifts can move the needle.

Sources

• Starbucks Unveils Reimagined Loyalty Program to Deliver More Meaningful Value, Personalization and Engagement for Members — Starbucks Investor Relations.
  https://investor.starbucks.com/news/financial-releases/news-details/2026/Starbucks-Unveils-Reimagined-Loyalty-Program-to-Deliver-More-Meaningful-Value-Personalization-and-Engagement-for-Members/default.aspx

• Starbucks reimagines its Rewards program with new levels and exclusive perks — Starbucks News (about.starbucks.com), January 29, 2026.
  https://about.starbucks.com/press/2026/starbucks-reimagines-its-rewards-program-with-new-levels-and-exclusive-perks/

• Starbucks overhauls loyalty program as U.S. visits rebound — Axios, January 29, 2026.
  https://www.axios.com/2026/01/29/starbucks-rewards-program-changes-2026

The internet in your living room was leaking — and Google just swatted a giant fly

A few weeks ago (January 28, 2026), Google’s Threat Intelligence Group announced a coordinated action that reads like a cyber-thriller: it seized domains, kicked malicious apps out of Android, and worked with industry partners to dismantle what researchers say was one of the world’s largest residential proxy networks — operated by a company commonly referred to as IPIDEA. The headline detail is blunt: millions of everyday devices — home routers, set‑top boxes, phones and PCs — were being quietly turned into exit nodes that masked the activity of criminal and state‑linked hackers.

This matters because residential proxies don’t just anonymize web browsing. They let attackers hide behind seemingly normal home internet traffic to break into corporate systems, exfiltrate data, run botnets, and stage espionage campaigns. When those exit nodes live inside your apartment or your aunt’s tiny business router, the problem becomes intimate, local — and harder to police at scale.

Why this takedown is unusual

• It targeted the business model behind a sprawling “gray market” rather than a single malware family.
• Google combined technical defensive moves (Play Protect updates), legal tools (domain seizures), and industry coordination (DNS blocking, partner intelligence) to degrade the network.
• The network reportedly serviced hundreds of malicious brands and SDKs embedded across platforms, meaning infection vectors ranged from trojanized apps to preinstalled payloads on cheap hardware.

The action Google described was reported across major outlets and followed weeks of analysis by threat hunters who mapped the two‑tier command-and-control architecture that assigned proxy tasks to enrolled devices. The public claims: in a single seven‑day window in January, more than 550 tracked threat groups used IPIDEA-linked IPs to cloak activity. Google said its steps “reduced the available pool of devices for the proxy operators by millions.” (Date of the disruption announcement: January 28, 2026.)

A quick primer: what are residential proxy networks?

• Residential proxy: a service that routes internet traffic through IP addresses assigned to consumer ISPs — so web requests look like they originate from real homes.
• Legitimate uses: ad verification, localized scraping for price comparison, or bypassing certain geo-restrictions when done transparently.
• Abusive uses: blending malicious traffic with normal residential browsing to evade detection; staging credential spraying; accessing corporate services while appearing as a domestic user; operating botnets and command channels.

IPIDEA’s alleged method was notable: sell SDKs or “monetization” tools to app developers, or ship off‑brand devices with proxy code preinstalled. That created a huge, distributed pool of real‑world IPs available to paying customers — some criminal, some state‑linked.

What happened on January 28, 2026

• Google’s Threat Intelligence Group (GTIG) pursued legal orders to take down the control domains used by IPIDEA.
• Google Play Protect was updated to detect and remove hundreds of apps linked to the operation.
• Google shared technical indicators with partners and ISPs; firms such as Cloudflare and some threat‑intel groups helped block DNS and mapping infrastructure.
• Media and security researchers published timelines and lists of affected SDKs and proxy brands; reporting tied the network to multiple botnet campaigns and malicious toolkits.

Sources reporting the operation estimated that millions of devices were removed from the proxy pool and that dozens of brands and SDK families were disrupted.

Why this is a national‑security and consumer problem at the same time

• Scale and stealth: when exit nodes are ordinary homes, defenders see “normal” traffic. That makes attribution and mitigation expensive and slow.
• Dual‑use plumbing: many of the same tools can be framed as “legitimate” privacy or monetization services — which complicates takedowns and legal responses.
• Supply‑chain angle: preloaded firmware or uncertified hardware with hidden proxy payloads means customers may be compromised before they power the device.
• State interest: security briefings and law‑enforcement filings in recent years tie residential proxy ecosystems to state‑linked espionage and large router compromises, elevating this beyond mere fraud.

What ordinary users should know (and do)

• Your device might be part of a proxy network without obvious signs. Check for unknown apps, especially utilities or “monetization” tools, and remove suspicious ones.
• Keep firmware and OS software updated; buy devices from reputable vendors; be wary of cheap off‑brand boxes that advertise a lot of bundled functionality.
• Use network monitoring where possible: check for unexplained outbound connections or unfamiliar services bound to your router.
• Change default router passwords and disable remote‑management features if you don’t use them.

What this takedown does — and doesn’t — solve

• It’s a strong, high‑impact disruption: removing command domains and evicting malicious apps can cripple an operator’s ability to coordinate millions of exit nodes.
• But it’s not a permanent cure: the residential‑proxy market is large, commercially motivated, and resilient. Operators can rebrand, change SDKs, or migrate to other infrastructure. Cheap hardware suppliers and eager app monetizers create fresh vectors.
• Long term progress requires more than technical takedowns: cross‑industry cooperation, clearer legal frameworks for deceptive SDK practices, and improved device supply‑chain security.

What to watch next

• Will regulators pivot to target the business side — SDK vendors, app monetization marketplaces, or retailers of uncertified devices?
• Will other major platform owners match Google’s approach (e.g., app‑store blocks, domain‑seizure cooperation)?
• Will threat actors move toward decentralization (peer‑to‑peer proxies) or new monetization channels that are harder to interdict?

Things to remember

• Residential proxies exploit trust: traffic coming from a home IP looks normal, which attackers weaponize.
• Disruption can be effective at scale, but the underlying market incentives still exist.
• Consumer vigilance and industry partnership are both required to keep this class of abuse in check.

My take

This was a high‑leverage move: attacking the control plane and the supply channels of a sprawling proxy business hits an ecosystem where the marginal cost of misbehavior is low but the upside for attackers is huge. Google’s action will cause real, measurable harm to operators who relied on scale and obscurity — and it signals that platform defenders are willing to combine technical, legal, and cooperative tools to protect users.

But the takeaway shouldn’t be complacency. The incentives that built this “gray market” are intact: monetization pressure for developers, low‑cost hardware manufacturers, and demand from bad actors who prize plausible domestic IPs. Expect more takedowns, but also expect adaptation. For everyday users, the safest posture remains hygiene: don’t install sketchy system‑style apps, keep devices updated, and treat cheap “preloaded” hardware with suspicion.

Sources

• Google Threat Intelligence Group — Disrupting the World's Largest Residential Proxy Network (summary articles and GTIG coverage).
  https://www.reuters.com/technology/google-disrupts-large-residential-proxy-network-reducing-devices-used-operators-by-millions-2026-01-28/ (Reuters coverage of GTIG announcement)

• United States Department of Justice — Court‑Authorized Operation Disrupts Worldwide Botnet Used by People’s Republic of China State‑Sponsored Hackers (September 18, 2024).
  https://www.justice.gov/opa/pr/court-authorized-operation-disrupts-worldwide-botnet-used-peoples-republic-china-state

• Tech and cybersecurity reporting on the January 28, 2026 disruption (overview of GTIG findings and industry coordination).
  https://www.techradar.com/pro/security/we-believe-our-actions-have-seriously-impacted-one-of-the-largest-residential-proxy-providers-google-takes-the-fight-to-ipidea-and-removes-millions-of-devices-from-criminal-network

• Cybersecurity coverage summarizing GTIG’s takedown and technical details of IPIDEA.
  https://cybernews.com/security/google-shuts-down-ipidea-proxy-network-home-internet/

Note: coverage and technical writeups published January 28–29, 2026 formed the basis for this post. The Wall Street Journal reported an exclusive framing of the story; other outlets and Google’s GTIG materials provide public technical detail and context.

The end of an era: Comcept, the studio behind Mighty No. 9, has shut down

It’s hard not to feel a little nostalgic — and a touch vindicated — when an old industry story finally reaches a tidy, bureaucratic end. On January 13, 2026, Comcept, the studio founded by Mega Man veteran Keiji Inafune, was officially dissolved by a shareholders’ resolution. The notice appeared in Japan’s government gazette and was reported widely on January 29, 2026. For many, the Comcept name will always be tangled with one project in particular: Mighty No. 9 — the crowdfunded “spiritual successor” to Mega Man that became an object lesson in what can go wrong when ambition, expectations and execution fall out of sync.

Quick snapshot

• Company: Comcept (founded December 2010 by Keiji Inafune)
• Official dissolution date announced by shareholders: January 13, 2026
• Public reporting of the notice: January 29, 2026
• Best-known projects: Mighty No. 9, contributions to Soul Sacrifice and ReCore, and later collaboration with Level-5 as LEVEL5 comcept

Why this matters (and why it still stings)

Mighty No. 9 was more than a struggling platformer; it became a touchstone for debates about crowdfunding, reputation, and the relationship between creators and fans. The game’s Kickstarter success in 2013 raised hopes and millions of dollars, but its rocky development and uneven release left a vocal fraction of backers angry and wary. That controversy shadowed Comcept’s story for years.

But the studio’s arc is more than one failed title. Comcept began as a creative offshoot for one of Capcom’s key designers, produced ideas that influenced other teams, and eventually entered a partnership with Level-5 in 2017. Over the last few years Comcept was gradually folded into Level-5 operations — a process that culminated in the official legal dissolution earlier this month.

This closure signals the formal end of a company that, for better or worse, loomed large in discussions about modern game development culture: author-driven creativity, the promise (and peril) of crowdfunding, and what happens when a studio’s brand can’t escape a single, infamous project.

Background and timeline

• 2010: Keiji Inafune leaves Capcom and founds Comcept.
• 2013: Mighty No. 9 Kickstarter launches and meets fundraising goals, becoming a high-profile crowdfunded game.
• 2016: Mighty No. 9 releases to mixed-to-negative critical reception and frustrated backers. Several promised ports (notably 3DS and Vita) never materialize.
• 2017: Comcept forms LEVEL5 comcept in collaboration with Level-5; corporate structure begins to change.
• 2024–2025: Keiji Inafune departs the Level-5 arrangement; Level-5 integrates the teams into its Osaka office and the LEVEL5 comcept subsidiary is wound down.
• January 13, 2026: Comcept is dissolved by shareholders (published in the Kanpo gazette). Public reports surface on January 29, 2026.

Lessons for creators, backers and studios

• Crowdfunding is not a guarantee of quality or of accountability; even high-profile figures can struggle to shepherd a complex project to a satisfactory finish.
• Brand and reputation matter long after a single product ships. A studio’s public legacy can hinge on a single high-profile success or failure.
• Corporate absorption — mergers, acquisitions, and internal restructurings — can leave a company nominally in existence long after its team, projects, and identity have been subsumed. The legal dissolution of Comcept merely formalizes what many observers considered already true: the company had, in practice, been absorbed.

A few takeaways

• Comcept was officially dissolved following a shareholders’ resolution on January 13, 2026, with public notices appearing January 29, 2026.
• Mighty No. 9’s troubled history is a defining chapter for the studio and a case study in crowdfunding expectations versus delivery.
• The Comcept name had effectively faded before the formal dissolution, following its integration with Level-5 and Inafune’s exit in 2024–2025.

My take

Comcept’s closure reads like a tidy epilogue to a messy story. The studio’s start was ambitious and creative — a chance for a well-known creator to strike out independently — but the Mighty No. 9 saga exposed how delicate the trust between creators and communities can be. Today’s legal notice doesn’t change the feelings of backers who were disappointed, nor does it erase the games that came from Comcept’s work. What it does do is close a chapter, and offer a reminder: reputation in this industry takes years to build and can be eroded very quickly. For game developers aiming to crowdfund or to pivot between independent and partner-backed models, Comcept’s story still has practical lessons about transparency, project scope, and follow-through.

Sources

• Gematsu — Comcept shuts down. https://www.gematsu.com/2026/01/comcept-shuts-down
• GameBiz — 元カプコン稲船敬二氏設立のcomceptが解散 (Japanese). https://gamebiz.jp/news/420020
• GameSpot — Comcept, The Studio Behind Mighty No. 9 And ReCore, Shuts Down. https://www.gamespot.com/articles/comcept-the-studio-behind-mighty-no-9-and-recore-shuts-down/1100-6537781/
• Nintendo Life — Keiji Inafune's Mighty No. 9 Studio Comcept Is Finished. https://www.nintendolife.com/news/2026/01/keiji-infunes-mighty-no-9-studio-comcept-is-finished