Unmasking the Interface: CCPA Penalizes Nine Major Platforms for Dark Patterns

In a sweeping regulatory enforcement action, India’s consumer watchdog penalizes prominent digital service providers for utilizing deceptive interface designs that manipulate user choices.

In an official update presented to the Rajya Sabha in August 2026, the Indian government confirmed that the Central Consumer Protection Authority (CCPA) has penalized nine prominent digital platforms for deploying deceptive user interface designs known as “dark patterns”. Affecting millions of everyday consumers across quick commerce, aviation, edtech, and ticketing sectors, the regulatory crackdown targeted practices such as hidden fees, pre-ticked donation boxes, and manipulative checkout prompts. The enforcement actions underline the government's tightening oversight of unfair digital trade practices under the framework of the Consumer Protection Act and the Guidelines for Prevention and Regulation of Dark Patterns.

Unpacking the Violations: Drip Pricing, Basket Sneaking, and Confirm Shaming

The CCPA's investigation revealed a variety of interface mechanisms designed to impair free and informed consumer decision-making. Under the guidelines, 13 distinct types of manipulative digital designs—including false urgency, subscription traps, and trick questions—are strictly monitored.

Key platform violations highlighted in official parliamentary disclosures include:

• Zepto Marketplace: Fined ₹7 lakh after investigators found that initial item prices omitted handling charges (categorized as drip pricing) while automatically bundling membership fees into carts (basket sneaking). The quick commerce platform has since discontinued the practice.

• Physics Wallah: Faced a ₹5 lakh penalty following suo motu cognizance regarding an automatically pre-selected ₹10 donation to the "PW Foundation" backed by emotionally persuasive messaging, alongside mandatory personal data collection for free courses.

• IndiGo Airlines: Addressed regulatory complaints regarding "confirm shaming" on its mobile application. The airline subsequently replaced a manipulative opt-out prompt ("No I will take risk") with a neutral alternative ("No, I will not add to the trip").

• BookMyShow and Others: Directed to remove pre-ticked contributions to charitable initiatives like BookASmile. Additional penalties were levied against FirstCry (₹2 lakh), Anuj Jindal (₹3 lakh), PharmaEasy (₹1 lakh), McAfee (₹1 lakh), and SpiceJet (₹1 lakh) for deceptive countdown timers, hidden charges, and forced subscriptions.

Impact on Consumers, Businesses, and Digital Compliance

The administrative intervention marks a critical turning point for digital commerce and consumer rights in India. For everyday users, the removal of hidden checkout additions and manipulative language ensures greater transparency and financial predictability. For corporate entities and startup platforms, the enforcement serves as a strict warning that user interface (UI) designs must prioritize transparent consent over aggressive conversion tactics. Companies found in violation are required to deposit statutory penalties and overhaul their application architectures to comply with national consumer protection mandates.

Why It Matters

As digital transactions increasingly dominate retail, travel, and education sectors, safeguarding consumer autonomy from hidden psychological manipulation is vital. Enforcing strict UI standards ensures fair digital trade and holds technology providers legally accountable for transparent user interactions.

Key Facts at a Glance

• Regulatory Body: Central Consumer Protection Authority (CCPA).

• Total Platforms Penalized: Nine digital companies, including Zepto, IndiGo, and Physics Wallah.

• Total Fines Collected: Approximately ₹20 lakh recovered from violators since the launch of self-audit advisories.

• Core Violations Targeted: Drip pricing, basket sneaking, confirm shaming, and forced subscriptions.

FAQ Section

What are "dark patterns" in digital commerce?

Dark patterns refer to deceptive user interface designs engineered on websites and mobile apps to trick or manipulate consumers into making unintended purchases or sharing personal data.

Which companies were penalized by the CCPA?

The CCPA penalized nine platforms, including quick-commerce provider Zepto, airline IndiGo, edtech firm Physics Wallah, ticketing platform BookMyShow, FirstCry, PharmaEasy, McAfee, SpiceJet, and Anuj Jindal.

What specific violation led to Zepto's fine?

Zepto was fined ₹7 lakh because its app displayed lower initial prices while automatically adding handling charges and membership fees at checkout, constituting drip pricing and basket sneaking.

Where can citizens review official government notices on consumer protection?

Comprehensive compliance circulars and parliamentary updates are accessible via the Press Information Bureau (PIB) Portal.

Source: Press Information Bureau (PIB), Hindustan Times, Outlook Business