CCPA Dark Patterns Penalty: ₹20 Lakh Fine on 9 Platforms

Introduction: CCPA Dark Patterns Penalty — Why It Matters

India’s consumer protection regulator has intensified its crackdown on deceptive online practices by imposing penalties on nine major digital platforms. The CCPA Dark Patterns Penalty resulted in total fines of ₹20 lakh after the Central Consumer Protection Authority (CCPA) found multiple companies using manipulative interface designs that could mislead consumers.

The enforcement action targets companies including Zepto, IndiGo, Physics Wallah, FirstCry, PharmaEasy, BookMyShow, SpiceJet, McAfee, and Anuj Jindal. The penalties were issued under the Consumer Protection Act, 2019, with the regulator citing violations of the Guidelines for Prevention and Regulation of Dark Patterns, 2023. The move highlights India’s growing focus on ensuring transparency and fairness across digital platforms.

What is the Central Consumer Protection Authority (CCPA)?

The Central Consumer Protection Authority (CCPA) is India’s consumer rights regulator established under the Consumer Protection Act, 2019. The authority investigates unfair trade practices, misleading advertisements, deceptive marketing techniques, and consumer rights violations across physical and digital markets.

With e-commerce becoming a primary shopping channel for millions of Indians, the CCPA has expanded its focus to include manipulative user interface designs, commonly known as dark patterns, that influence consumer decisions without their informed consent.

Background of the Dark Patterns Guidelines

The Guidelines for Prevention and Regulation of Dark Patterns, 2023 were introduced to curb deceptive online design practices that manipulate user behaviour. These guidelines identify 13 categories of dark patterns commonly found on digital platforms.

Some of the most common examples include:

• Basket sneaking
• Confirm shaming
• False urgency
• Subscription traps
• Hidden costs
• Forced action
• Pre-selected consent
• Interface interference

The latest enforcement demonstrates that these guidelines are no longer merely advisory but are actively being used to hold companies accountable for consumer protection violations.

CCPA Dark Patterns Penalty: Full Breakdown

Timeline of Events

Following investigations into deceptive online practices, the CCPA examined multiple consumer-facing digital platforms for compliance with the Dark Patterns Guidelines.

The authority subsequently imposed financial penalties and directed several companies to modify or discontinue specific practices that were found to mislead users. Between December 2023 and March 2026, the government also reported receiving 308 consumer complaints related to dark patterns, indicating increasing public awareness of such practices.

Platforms Penalised

The regulator imposed penalties on nine organisations for different forms of deceptive interface design.

What Violations Were Identified?

According to the regulator, the penalised platforms employed interface designs that could influence consumer decisions without providing adequate transparency.

Some of the identified practices included:

• Automatically enrolling customers into paid memberships.
• Adding hidden or unexpected charges during checkout.
• Using countdown timers that created artificial purchase urgency.
• Pre-selecting donations or optional purchases.
• Displaying pre-ticked consent boxes.
• Encouraging users through guilt-based confirmation messages.
• Requesting unnecessary personal information for free services.

These practices can make consumers spend more money, share additional personal information, or agree to services they did not intentionally choose.

Potential Risks and Consumer Impact

The enforcement action reflects broader concerns about consumer autonomy and digital trust.

Financial Risks

Consumers may unknowingly:

• Pay hidden fees.
• Purchase unwanted subscriptions.
• Make unintended donations.
• Accept additional paid services.

Privacy Risks

Some dark patterns encourage users to disclose more personal information than necessary, increasing privacy concerns and expanding the amount of consumer data collected by digital platforms.

Business and Compliance Risks

For organisations, continued use of deceptive interface designs may result in:

• Regulatory investigations.
• Financial penalties.
• Increased consumer complaints.
• Damage to brand reputation.
• Loss of customer trust.

As regulators worldwide continue strengthening digital consumer protection frameworks, businesses may also face stricter compliance expectations in the coming years.

CCPA Dark Patterns Penalty: Official Regulatory Action

The CCPA has instructed several companies to discontinue or modify the identified practices. In addition to imposing monetary penalties, the authority directed platforms to improve transparency and ensure users can make informed decisions without manipulation.

Notably:

• BookMyShow was instructed to discontinue the automatic addition of the Re.1 BookASmile donation through a pre-selected option.
• IndiGo modified its application language after concerns regarding confirm shaming were raised during the regulatory review.

The action reinforces the government’s commitment to enforcing consumer protection standards within India’s rapidly expanding digital economy.

Industry Context: Why Regulatory Action Against Dark Patterns Is Increasing

Governments around the world are placing greater emphasis on protecting consumers from deceptive online experiences. As e-commerce, online education, digital subscriptions, and app-based services continue to grow, regulators are increasingly treating manipulative interface design as a consumer protection issue rather than simply a design choice.

Businesses are therefore expected to adopt transparent user experiences, obtain meaningful consent, and avoid practices that pressure users into unintended actions.

For readers interested in related regulatory developments, explore our Laws & Government, Penalties, and Learn & Protect sections for similar consumer protection and cybersecurity compliance updates.

How to Protect Yourself from Dark Patterns

Consumers can reduce the impact of deceptive online practices by following these precautions:

1. Carefully review every item before completing checkout.
2. Remove any products, memberships, or donations added automatically.
3. Read subscription terms before confirming payment.
4. Check whether consent boxes have already been selected.
5. Compare the final payable amount with the advertised price.
6. Report deceptive practices to the appropriate consumer protection authorities when necessary.

Key Takeaways

• The CCPA Dark Patterns Penalty 2026 resulted in ₹20 lakh in penalties against nine digital platforms.
• Zepto received the highest penalty of ₹7 lakh for hidden charges and automatic membership additions.
• The enforcement action is based on the Guidelines for Prevention and Regulation of Dark Patterns, 2023 under the Consumer Protection Act, 2019.
• The government received 308 complaints related to dark patterns between December 2023 and March 2026.
• The action signals stronger regulatory oversight of deceptive digital practices and encourages greater transparency across online platforms.

Conclusion: CCPA Dark Patterns Penalty and What Happens Next

The CCPA Dark Patterns Penalty marks another significant step in India’s efforts to strengthen digital consumer protection. By penalising deceptive interface designs and directing companies to improve transparency, the regulator has reinforced that manipulative online practices will face increasing scrutiny.

As digital commerce continues to evolve, businesses should regularly review their user interfaces for compliance with the Consumer Protection Act, 2019 and the Dark Patterns Guidelines, 2023. As the CCPA Dark Patterns Penalty demonstrates, consumers should remain vigilant during online purchases while businesses should ensure full compliance with India’s consumer protection regulations.