Accidental Subscriptions and Hidden Fees: How to Fight Back Against “Sneak-into-Basket” Charges under the CCPA Guidelines on Prevention of Dark Patterns, 2023

Automatic Checkout Charges, Hidden Fees in E-Commerce India, and Legal Remedies Against Dark Patterns

A. Introduction

Imagine purchasing a mobile phone online for ₹19,999. During the checkout process, you proceed through several pages, trusting that the final price reflects your intended purchase. Upon payment, however, you discover that the platform has automatically added an extended warranty, shipping protection plan, premium membership subscription, and donation contribution without your informed consent. The total amount charged exceeds the advertised price by several thousand rupees.

Such experiences have become increasingly common in India’s rapidly expanding digital marketplace. Consumers often encounter hidden fees, automatic checkout charges, pre-selected subscriptions, and deceptive interface designs that manipulate purchasing decisions. These practices are commonly referred to as “dark patterns,” a term used to describe user interface designs that mislead or coerce consumers into making decisions they may not otherwise have taken.

Among the most controversial dark patterns is the “sneak-into-basket” practice, where additional goods, services, or charges are automatically inserted into a consumer’s shopping cart without explicit consent. Closely associated are opt-out subscription charges, hidden service fees, automatic renewals, and misleading checkout mechanisms.

The issue raises significant legal questions concerning informed consent, unfair trade practices, transparency obligations, and consumer autonomy in digital commerce. Recognizing the growing threat posed by such practices, the Government of India introduced the Consumer Protection (Prevention of Misleading Advertisements and Endorsements for Misleading Advertisements) framework and subsequently issued the Guidelines for Prevention and Regulation of Dark Patterns, 2023 through the Central Consumer Protection Authority (CCPA).

This article critically examines the legal framework governing accidental subscriptions and hidden fees in India, analyzes the CCPA Dark Patterns Guidelines, evaluates available consumer remedies, and explores the future of digital consumer protection in the Indian e-commerce ecosystem.


B. Historical and Regulatory Background

Rise of Digital Commerce and Consumer Manipulation

India’s e-commerce sector has witnessed exponential growth over the past decade. The increasing penetration of smartphones, digital payment systems, and online marketplaces has transformed consumer purchasing behaviour.

However, the same technological advancements have enabled sophisticated behavioural manipulation techniques. Digital platforms increasingly rely on interface design, algorithmic persuasion, and psychological nudges to maximize revenue generation.

Unlike traditional fraud, modern digital manipulation often operates within seemingly lawful website architecture. Consumers are not explicitly deceived through false statements; rather, they are guided toward unintended decisions through interface design.

Common examples include:

  • Pre-ticked subscription boxes.
  • Automatically added insurance products.
  • Hidden convenience fees.
  • Automatic membership enrollment.
  • Misleading cancellation procedures.
  • Disguised advertisements.

These practices undermine the principle of informed consumer choice, which forms the foundation of consumer protection law.

Policy Concerns Recognized by Government

Several governmental bodies began expressing concerns regarding manipulative online practices.

The Department of Consumer Affairs conducted consultations with:

  • E-commerce platforms,
  • Consumer organizations,
  • Industry associations,
  • Digital rights groups,
  • Legal experts.

These consultations highlighted recurring consumer complaints relating to:

  • Unauthorized charges,
  • Forced subscriptions,
  • Hidden costs,
  • Difficult cancellation processes,
  • Misleading user interfaces.

The Government recognized that existing laws addressing unfair trade practices required supplementary regulatory guidance tailored specifically to digital commerce.

This led to the issuance of the CCPA Guidelines for Prevention and Regulation of Dark Patterns, 2023.


C. Legal Framework

Consumer Protection Act, 2019

The principal legislation governing such practices is the Consumer Protection Act, 2019.

The Act was enacted to strengthen consumer rights in the digital economy and replace the Consumer Protection Act, 1986.

Consumer Rights under Section 2(9)

Section 2(9) recognizes several rights relevant to hidden fee disputes, including:

  • Right to be informed,
  • Right to be protected against unfair trade practices,
  • Right to seek redressal,
  • Right to consumer awareness.

The right to be informed is particularly significant because hidden charges and automatic subscriptions deprive consumers of complete pricing information before purchase.

Unfair Trade Practice under Section 2(47)

Section 2(47) broadly defines “unfair trade practice.”

Although the provision predates the Dark Patterns Guidelines, it encompasses conduct involving:

  • Misrepresentation,
  • Deceptive practices,
  • False representations,
  • Misleading statements.

Automatic addition of products or services without informed consent can constitute an unfair trade practice because consumers are induced into transactions through deceptive mechanisms.

Product and Service Liability Implications

Where automatic charges cause financial loss or unauthorized payments, service providers may face liability for deficient service under the Act.

The legal inquiry focuses on whether:

  • The consumer gave informed consent,
  • Adequate disclosures were made,
  • The pricing structure was transparent.

If the answer is negative, consumer forums may grant compensation.


E-Commerce Rules, 2020

The Consumer Protection (E-Commerce) Rules, 2020 significantly strengthened transparency obligations.

Rule 4: Duties of E-Commerce Entities

Rule 4 requires e-commerce entities to provide clear information regarding:

  • Total price,
  • Break-up of charges,
  • Refund policies,
  • Cancellation procedures,
  • Payment methods.

The legislative intent is to ensure informed decision-making before purchase.

A hidden fee introduced at the final stage of checkout may violate this transparency obligation.

Rule 5: Prohibition of Unfair Practices

The Rules prohibit manipulation of prices and unfair consumer treatment.

Where a platform artificially obscures charges or inserts unwanted products into the basket, the conduct may amount to a violation of the Rules.


Information Technology Framework

Although the Information Technology Act, 2000 does not directly regulate dark patterns, several principles remain relevant.

Electronic contracts require:

  • Valid consent,
  • Free consent,
  • Acceptance of terms.

The validity of digital consent becomes questionable when consent is obtained through deceptive interface design.

Indian contract law traditionally requires consensus ad idem—meeting of minds. A consumer who unknowingly subscribes to a paid service arguably never intended to enter such a contract.


Indian Contract Act, 1872

Section 13 – Consent

Consent requires agreement upon the same thing in the same sense.

Where subscription charges are hidden or obscured, genuine consent may be absent.

Section 14 – Free Consent

Consent is considered free when not caused by:

  • Coercion,
  • Undue influence,
  • Fraud,
  • Misrepresentation.

While dark patterns may not fit traditional fraud definitions, they can involve misrepresentation and deceptive inducement.

This raises important questions regarding the enforceability of contracts formed through manipulative digital interfaces.


D. Regulatory Framework

CCPA Guidelines for Prevention and Regulation of Dark Patterns, 2023

The most significant regulatory development is the issuance of the Guidelines for Prevention and Regulation of Dark Patterns, 2023 by the Central Consumer Protection Authority (CCPA) under powers conferred by the Consumer Protection Act, 2019.

The Guidelines were officially notified on 30 November 2023.

The objective is to identify, prohibit, and regulate deceptive user interface practices across digital platforms.


Definition of Dark Patterns

The Guidelines define dark patterns as deceptive design patterns that:

  • Mislead consumers,
  • Subvert consumer autonomy,
  • Impair informed decision-making,
  • Manipulate purchasing choices.

This definition recognizes that consumer harm can arise not only from false information but also from the manner in which information is presented.


Sneak into Basket

The Guidelines specifically identify “Sneak into Basket” as a prohibited dark pattern.

It refers to:

Automatic addition of products, services, donations, insurance, or ancillary charges into a consumer’s purchase basket without explicit consent.

Examples include:

  • Travel insurance automatically added while booking tickets.
  • Premium support services pre-selected during electronics purchases.
  • Warranty extensions added without active consumer selection.

The legal significance is substantial because regulators have expressly recognized the practice as deceptive.

A consumer need not prove traditional fraud; demonstrating the existence of a prohibited dark pattern may itself support regulatory intervention.


Subscription Trap

Another prohibited dark pattern is the subscription trap.

This occurs when:

  • Enrollment is easy,
  • Cancellation is difficult,
  • Recurring charges continue without clear authorization.

Examples include:

  • One-click enrollment,
  • Multi-step cancellation processes,
  • Hidden unsubscribe options.

The Guidelines seek to restore symmetry between subscription and cancellation processes.


Interface Interference

Platforms frequently use visual manipulation techniques such as:

  • Highlighting paid options,
  • Concealing free alternatives,
  • Using confusing colour schemes,
  • Designing misleading buttons.

Such conduct falls within interface interference.

The prohibition recognizes that consumer choice can be distorted through design rather than explicit statements.


False Urgency and Drip Pricing

The Guidelines also prohibit:

False Urgency

Artificial scarcity claims such as:

  • “Only 1 room left”
  • “Offer expires in 2 minutes”

when such statements are inaccurate.

Drip Pricing

Drip pricing occurs when additional charges are gradually revealed throughout the purchasing process.

Consumers often discover:

  • Platform fees,
  • Handling charges,
  • Convenience fees,
  • Service fees,

only after investing significant time in the transaction.

The CCPA recognizes this practice as undermining pricing transparency.


Legal Significance of the Guidelines

A key legal debate concerns whether the Guidelines create new substantive obligations or merely clarify existing consumer protection principles.

A purposive interpretation suggests that the Guidelines function as regulatory standards that help determine when conduct amounts to:

  • Unfair trade practice,
  • Misleading representation,
  • Consumer rights violation.

Therefore, they serve both interpretive and enforcement functions.

The Guidelines significantly strengthen regulatory enforcement because authorities can now point to specific prohibited patterns rather than relying solely on broad statutory concepts.

Moreover, they provide consumers and adjudicatory bodies with a structured framework for evaluating deceptive digital practices.

Case Law Analysis, Enforcement Actions, Comparative Perspective, Consumer Remedies, Critical Analysis, Future Challenges, and Conclusion

E. Case Law Analysis

One of the difficulties in the regulation of dark patterns is that Indian courts have only recently begun confronting digital consumer manipulation in its modern form. Consequently, there is limited judicial precedent directly addressing “sneak-into-basket” charges or accidental subscriptions. Nevertheless, several important decisions under consumer law, contract law, and e-commerce regulation provide principles that are highly relevant.

1. Lucknow Development Authority v. M.K. Gupta (1994)

Principle Established

The Supreme Court emphasized that consumer protection legislation must receive a liberal interpretation in favour of consumers.

The Court observed that the purpose of consumer law is not merely compensatory but also preventive and corrective. Businesses must be held accountable where consumers suffer due to unfair or deficient practices.

Relevance to Dark Patterns

This judgment supports an expansive interpretation of consumer rights in digital transactions. Where consumers are subjected to hidden fees or unauthorized subscriptions, adjudicating authorities may rely upon this principle to prioritize substantive fairness over technical contractual arguments.


2. National Commission Decisions on Hidden Charges

The National Consumer Disputes Redressal Commission (NCDRC) has repeatedly held that charging consumers amounts that were not clearly disclosed at the time of purchase may constitute an unfair trade practice.

Across sectors such as:

  • Airlines,
  • Real estate,
  • Banking,
  • Insurance,

consumer forums have consistently emphasized transparency in pricing.

Legal Principle

A consumer’s consent cannot be considered informed if material pricing information is concealed until the final stage of a transaction.

This reasoning directly supports regulatory action against drip pricing and sneak-into-basket mechanisms.


3. Internet and Electronic Contract Jurisprudence

Indian courts have generally accepted electronic contracts as legally enforceable.

However, enforceability depends upon:

  • Notice,
  • Knowledge,
  • Meaningful consent.

The judiciary has repeatedly emphasized that contractual terms must be reasonably brought to the attention of consumers.

Application to Subscription Traps

Where cancellation procedures are intentionally hidden or where recurring charges are buried in fine print, the platform may struggle to establish valid informed consent.


4. Comparative Judicial Developments

International courts have increasingly treated deceptive interface design as evidence of unfair commercial practices.

Several European and American enforcement actions have recognized that digital manipulation can invalidate purported consent.

These developments are likely to influence future Indian adjudication, particularly after the enactment of the 2023 Dark Patterns Guidelines.


F. Practical Examples

Example 1: Automatic Warranty Addition

A consumer purchases a laptop online.

The listed price is ₹55,000.

At checkout, a three-year protection plan costing ₹4,999 is automatically added through a pre-selected checkbox.

The consumer completes payment without noticing the addition.

Legal Analysis

This constitutes a classic sneak-into-basket dark pattern.

The consumer never actively opted for the warranty.

Potential violations include:

  • CCPA Dark Patterns Guidelines, 2023;
  • Consumer Protection Act, 2019;
  • E-Commerce Rules, 2020.

The consumer may seek a refund and compensation.


Example 2: Streaming Service Subscription Trap

A platform advertises a “free” one-month trial.

The consumer signs up.

After the trial period, recurring monthly charges begin automatically.

Cancellation requires navigating multiple hidden menus.

Legal Analysis

The issue extends beyond automatic renewal.

The legal concern is whether:

  • Renewal consent was adequately disclosed;
  • Cancellation was reasonably accessible.

If cancellation is intentionally obstructed, the platform may be engaging in a prohibited subscription trap.


Example 3: Hidden Travel Booking Fees

A consumer books airline tickets advertised at ₹7,500.

At the final payment page, additional charges suddenly appear:

  • Convenience fee,
  • Platform fee,
  • Processing fee,
  • Travel protection fee.

The final amount becomes ₹9,200.

Legal Analysis

This is a classic example of drip pricing.

The consumer’s purchasing decision was influenced by an incomplete initial price representation.

Such conduct undermines pricing transparency and may constitute an unfair trade practice.


G. Enforcement and Regulatory Actions

CCPA’s Increasing Focus on Dark Patterns

Since the issuance of the 2023 Guidelines, the Central Consumer Protection Authority has actively scrutinized digital platforms.

The Department of Consumer Affairs has repeatedly engaged with:

  • E-commerce companies,
  • Online travel aggregators,
  • Food delivery platforms,
  • Subscription-based services.

The government’s concern is that dark patterns distort market competition and undermine consumer autonomy.


Joint Working Groups and Industry Consultations

Before issuing the Guidelines, the Government constituted committees involving:

  • Consumer organizations,
  • Industry representatives,
  • Technical experts,
  • Regulatory authorities.

These consultations revealed widespread use of:

  • False urgency,
  • Forced action,
  • Sneak-into-basket tactics,
  • Subscription traps.

The findings significantly influenced the final regulatory framework.


Potential Regulatory Consequences

Platforms engaging in dark patterns may face:

  • Investigations by CCPA;
  • Directions to discontinue practices;
  • Consumer complaints;
  • Reputational consequences;
  • Monetary liability before consumer commissions.

Where deceptive conduct is systemic, regulators may seek broader corrective measures.


H. Critical Legal Analysis

Strengths of the Current Framework

The Dark Patterns Guidelines represent one of the most advanced regulatory interventions in Asia concerning digital consumer manipulation.

Several strengths are evident.

1. Recognition of Behavioural Exploitation

Traditional consumer law focused on false statements.

The Guidelines recognize that manipulation can occur through design architecture rather than direct misrepresentation.

This reflects contemporary realities of digital commerce.

2. Consumer-Centric Approach

The framework shifts focus from formal consent to meaningful consent.

Merely obtaining a click is no longer sufficient.

The quality of consumer choice becomes relevant.

3. Technology-Neutral Regulation

The Guidelines focus on outcomes rather than specific technologies.

Consequently, they remain adaptable to future digital innovations.


Weaknesses and Ambiguities

Despite their strengths, important challenges remain.

Lack of Specific Monetary Penalties

The Guidelines prohibit dark patterns but do not establish a dedicated penalty framework.

Enforcement still relies upon broader provisions of consumer law.

Subjective Standards

Determining whether a design genuinely manipulates consumers can be difficult.

The distinction between:

  • Legitimate marketing,
  • Persuasive design,
  • Deceptive design

may sometimes be unclear.

Cross-Border Enforcement

Many digital platforms operate internationally.

Enforcing Indian consumer standards against foreign entities remains challenging.


The Consent Problem

A major legal question concerns the nature of consent in digital environments.

Platforms often argue:

“Consumers clicked the checkbox.”

However, regulators increasingly recognize that formal clicks do not necessarily indicate informed choice.

The law is moving from:

“Did the consumer technically agree?”

toward:

“Was the agreement meaningfully informed and freely exercised?”

This shift represents a significant evolution in consumer jurisprudence.


I. Comparative International Perspective

European Union

The European Union has adopted some of the strictest consumer protection standards globally.

The and consumer protection directives emphasize:

  • Transparency,
  • Informed consent,
  • Fair interface design.

European regulators have imposed substantial penalties on companies employing deceptive subscription practices.

Comparison with India

India’s Dark Patterns Guidelines reflect many European principles but remain less enforcement-intensive.


United States

The United States primarily regulates dark patterns through:

  • Federal Trade Commission (FTC) enforcement,
  • State consumer protection statutes.

The FTC has aggressively targeted:

  • Subscription traps,
  • Negative option billing,
  • Deceptive recurring charges.

Comparison with India

The U.S. framework relies more heavily on enforcement actions than specific dark-pattern regulations.

India has chosen a more explicit regulatory approach by identifying prohibited patterns.


United Kingdom

The UK’s consumer protection regime focuses on:

  • Unfair commercial practices,
  • Transparency,
  • Consumer consent.

Regulators increasingly scrutinize online choice architecture and manipulative design.

Comparison with India

India’s 2023 Guidelines place it among jurisdictions actively recognizing behavioural manipulation as a distinct regulatory concern.


J. Consumer Remedies

1. Direct Refund Demand

The first step should be a written complaint to the platform.

Consumers should:

  • Preserve screenshots,
  • Retain invoices,
  • Document unauthorized charges.

Many disputes can be resolved through internal grievance mechanisms.


2. National Consumer Helpline

Consumers may approach the National Consumer Helpline for assistance and mediation.

This often results in quicker resolution without litigation.


3. E-Daakhil Portal

The Government’s E-Daakhil system allows online filing of consumer complaints.

Consumers can seek:

  • Refunds,
  • Compensation,
  • Litigation costs,
  • Corrective directions.

4. Consumer Commissions

Jurisdiction lies with:

  • District Consumer Disputes Redressal Commission,
  • State Consumer Disputes Redressal Commission,
  • National Consumer Disputes Redressal Commission.

Relief may include:

  • Refund of hidden charges,
  • Compensation for harassment,
  • Interest,
  • Corrective advertising orders.

Practical Litigation Strategy

A successful complaint should demonstrate:

  1. Lack of informed consent;
  2. Presence of hidden or automatic charges;
  3. Violation of transparency obligations;
  4. Consumer loss.

Screenshots of the checkout process are often the strongest evidence.


K. Future Challenges and Recommendations

Recommendation 1: Explicit Consent Mandate

Every additional paid service should require an independent affirmative action.

Pre-ticked boxes should be prohibited.


Recommendation 2: Standardized Cancellation Procedures

Cancellation should be no more difficult than enrollment.

A “one-click unsubscribe” requirement would significantly reduce subscription traps.


Recommendation 3: Enhanced Monetary Penalties

Dedicated penalties for dark pattern violations would strengthen deterrence.


Recommendation 4: Algorithmic Transparency

Large platforms should disclose how recommendation and checkout systems influence purchasing decisions.


Recommendation 5: Periodic Regulatory Audits

Independent audits could identify manipulative interface practices before widespread consumer harm occurs.


L. Conclusion

The controversy surrounding accidental subscriptions, automatic checkout charges, hidden fees in e-commerce, and sneak-into-basket practices represents a deeper struggle over the future of consumer autonomy in the digital economy.

The traditional model of consumer protection assumed that consumers made informed choices after reviewing available information. Modern digital commerce challenges that assumption. Consumers increasingly interact with sophisticated interfaces designed not merely to facilitate transactions but to shape behavioural outcomes.

The CCPA Guidelines on Prevention and Regulation of Dark Patterns, 2023 mark a significant regulatory shift. They acknowledge that manipulation can occur through design, architecture, and behavioural engineering even when no explicit false statement is made. By identifying practices such as sneak into basket, subscription traps, drip pricing, and interface interference, Indian law has moved beyond conventional notions of fraud and misrepresentation.

Nevertheless, the effectiveness of the framework will ultimately depend upon enforcement. Regulatory vigilance, judicial recognition of meaningful consent, and consumer awareness will determine whether the promise of the Guidelines translates into real protection.

The central legal insight is that consumer consent in the digital age must be more than a click. It must be informed, voluntary, transparent, and free from manipulative design. Any regulatory framework that fails to protect that principle risks allowing technology to erode the very autonomy that consumer law was created to safeguard.

Swati Tiwari
Author: Swati Tiwari