CCPA penalises dark patterns on two platforms
PhysicsWallah and McAfee India are fined for interface tricks that undermined informed consumer consent.
What happened
- The Central Consumer Protection Authority (CCPA) imposed penalties on PhysicsWallah and McAfee Software India for using dark patterns that misled consumers on their digital platforms.
- PhysicsWallah was fined ₹5 lakh: a ₹10 donation to its foundation was pre-selected at checkout (basket sneaking), kept selected via emotional messaging (confirm shaming), and 'free' courses were locked behind mandatory sharing of personal data (forced action).
- McAfee India was fined ₹1 lakh: its subscription-renewal screen offered only 'Renew Now' or 'Accept Risk', framing non-renewal as dangerous (confirm shaming, interface interference, trick question).
- Both firms were directed to remove the practices and ensure consumers can make free, informed choices.
- Action was taken under the Consumer Protection Act, 2019, the Consumer Protection (E-Commerce) Rules, 2020, and the Guidelines for Prevention and Regulation of Dark Patterns, 2023.
For Prelims
- What a 'dark pattern' is: a deceptive user-interface or user-experience design that tricks or pressures users into doing something they did not intend — subverting consumer autonomy, and treated as a misleading advertisement or unfair trade practice.
- Who acted — the CCPA: the Central Consumer Protection Authority, the central regulator for consumer rights, unfair trade practices and misleading ads. It can take suo motu cognizance, investigate, penalise and order corrective action.
- The two cases: PhysicsWallah (an ed-tech firm) fined ₹5 lakh; McAfee Software India (cybersecurity software) fined ₹1 lakh.
- The specific patterns named: Basket Sneaking (auto-adding the ₹10 donation), Confirm Shaming (guilt-based messaging), Forced Action (mandatory data to access 'free' content), Interface Interference (visually privileging 'Renew') and Trick Question (the 'Accept Risk' framing).
- The legal stack: the orders rest on three layers — the Consumer Protection Act, 2019 (Ss. 2(9) consumer rights, 2(28) misleading advertisement, 2(47) unfair trade practice); the Consumer Protection (E-Commerce) Rules, 2020 (Rule 4(3) and 4(9) on consent); and the Dark Patterns Guidelines, 2023.
- The 2023 Guidelines: notified by the CCPA on 30 November 2023, they specify 13 dark patterns as unfair trade practices and apply to all platforms, advertisers and sellers offering goods/services in India.
- Curator-verified — the full list of 13: False Urgency, Basket Sneaking, Confirm Shaming, Forced Action, Subscription Trap, Interface Interference, Bait and Switch, Drip Pricing, Disguised Advertisement, Nagging, Trick Wording (Trick Question), SaaS Billing and Rogue Malware.
- Curator-verified — the CCPA's basis: the CCPA was established under Section 10 of the Consumer Protection Act, 2019 and became operational in 2020; it is headed by a Chief Commissioner.
- What 'suo motu' means: the CCPA acted on its own motion, without waiting for a consumer complaint — a power that lets a regulator move proactively against systemic practices.
- Why the student angle matters: the CCPA noted that PhysicsWallah's users include students and minors, heightening the consumer-protection concern — useful colour for an answer on protecting vulnerable consumers.
For UPSC: CCPA (under the CP Act 2019) fined PhysicsWallah ₹5L and McAfee ₹1L for dark patterns; the Dark Patterns Guidelines 2023 list 13 specified patterns; the legal basis is the CP Act 2019 + E-Commerce Rules 2020.
What it is NOT: Dark-pattern regulation is NOT a standalone statute — it rides on the Consumer Protection Act, 2019; the 2023 Guidelines are subordinate rules, not an Act. The CCPA is a regulator, NOT a court — its orders are appealable.
For Mains
Syllabus: GS2.9 · GS2.15 · Linkage L1
Anchor
Enforcement of consumer rights in the digital marketplace by a statutory regulator (the CCPA) against deceptive online design.
Substantiation (data)
Two named penalties (₹5 lakh, ₹1 lakh); a three-layer legal basis (CP Act 2019 + E-Commerce Rules 2020 + 2023 Guidelines listing 13 dark patterns).
Exemplification
Live cases — an ed-tech firm and a software firm — illustrating basket sneaking, confirm shaming and forced action.
Problematisation
The orders expose how widespread, and how normalised, manipulative interface design has become, especially where users include minors.
Way-forward
Self-audits by platforms, the CCPA advisory, and proactive enforcement as tools to harden 'consent' in the digital economy.
Position
The government's stance: consumer consent must be explicit, informed and free of manipulative design — enforced through existing consumer law.
Deploys into: consumer protection in the digital economy · regulating Big Tech / ed-tech · role of statutory regulators (CCPA) and citizens' digital rights (GS2.9 statutory/regulatory bodies, GS2.15 governance & transparency).
Ministry of Consumer Affairs, Food & Public Distribution · 2026-06-03 · PRID 2268302 · PIB source ↗