Investigation: India’s Dark-Pattern Crackdown Is Growing, But Are CCPA Fines Enough to Deter Digital Commerce?

NEW DELHI | September 2, 2026

TruthWave Investigation

India has a rulebook for deceptive digital design. The Central Consumer Protection Authority has used it against nine digital platforms, but the enforcement record raises a public-interest question: do the penalties meaningfully deter large digital businesses, or is changing the interface the more important consequence?

What the regulator has done

The government told the Rajya Sabha in August that the CCPA had penalised nine digital platforms for dark patterns and collected about ₹20 lakh in penalties. The cases included practices such as drip pricing, basket sneaking, pre-selected donations and confirm-shaming. The enforcement actions also led some companies to change or remove the practices identified by the regulator.

The law is broader than the fines

The 2023 CCPA guidelines identify 13 categories of dark patterns, including false urgency, basket sneaking, confirm shaming, forced action, subscription traps, interface interference, bait and switch, drip pricing, disguised advertisements, nagging, trick wording, SaaS billing and rogue malware. The framework therefore concerns the design of a transaction, not merely a final checkout fee.

The enforcement gap

The disclosed monetary penalties are relatively small on a per-company basis. That does not by itself prove enforcement is ineffective, because changing an unlawful interface is also a regulatory result. But deterrence should be measured through removal speed, consumer refunds where appropriate, repeat violations, wider interface audits and whether the same practice appears elsewhere.

Self-audits were part of the solution

The Department of Consumer Affairs has encouraged platforms to use consumer feedback, satisfaction data, built-in features and self-auditing to identify dark patterns. A later advisory asked e-commerce platforms to conduct self-audits. What remains difficult to measure publicly is how many platforms actually found and corrected problems before consumers complained.

What consumers should watch for

Drip pricing, where charges appear late in the purchase.
Basket sneaking, where an unwanted item, membership or donation is added or preselected.
Confirm shaming, where refusal is worded to pressure the consumer.
Subscription traps that make cancellation harder than enrolment.
False urgency through countdowns or scarcity messages.

What this investigation does not establish

This investigation does not claim that every platform uses dark patterns, that every penalty is inadequate, or that the companies involved acted deliberately in the same way. The CCPA findings concern specific practices and regulatory actions. The wider deterrence question remains open.

What should happen next

A stronger enforcement system would publish a searchable record of cases, the interface behaviour identified, when it was removed, whether consumers were refunded, whether the company had self-certified compliance and whether repeat violations occurred. That would allow consumers and researchers to measure deterrence rather than rely on isolated penalty announcements.