You are two taps from paying. The number you agreed to somewhere back on the product page was ₹412. The number on the screen in front of you now says ₹468, and in the gap between those two screens a handling charge appeared and a membership plan added itself to your basket. You never said yes to either one. You also never said no, and that, precisely, is the design.
Why This Enforcement Round Actually Matters
The Ministry of Consumer Affairs disclosed the action in a written reply to the Rajya Sabha on 4 August 2026. Nine digital platforms penalised, among them IndiGo, Zepto, FirstCry, Physics Wallah, BookMyShow and SpiceJet. Quick commerce, aviation, edtech, ticketing, baby products. That spread is the story. This is not a rogue category behaving badly, it is a default way of building a checkout screen that spread across every sector at once because it works.
Zepto Marketplace drew the largest single penalty, ₹7 lakh, and the reasoning is worth reading closely because it is the exact thing that happened to your ₹412. The regulator found that showing a lower price first and appending handling charges later is drip pricing. Automatically including a membership plan without clear consent is basket sneaking. Two separate named offences in one checkout flow, on one order, in about four seconds of your attention. The government says Zepto has since removed both.
And the legal footing is older than the fines. The Prevention and Regulation of Dark Patterns Guidelines, 2023 already name thirteen specific practices: false urgency, basket sneaking, confirm shaming, forced action, subscription trap, interface interference, bait and switch, drip pricing, disguised advertisements, nagging, trick questions, SaaS billing and rogue malware. In June 2025 the CCPA told e-commerce platforms to self-audit and strip these out. What changed in August 2026 is only that somebody finally started collecting money. Naming a thing is what makes it arguable, which is the same reason India's repairability index for phones mattered before a single score was printed on a box.
Here is the scale of the thing, in the four figures that decide whether you should care.
Self-Audit Window Closes
Dec 2026
CCPA advisory period ends
Penalties Collected
₹20 lakh
Across all nine platforms
Online Shoppers Exposed
304 million
India's current buying base
Hit By Hidden Charges
63%
Up from 52% in 2024
That last figure is the one that should bother you, because it moved in the wrong direction across two years of the guidelines already being in force. Whatever the self-audit regime achieved between 2024 and now, it did not stop hidden charges reaching more people. And the per-person cost is deliberately small: a 2026 Datum Intelligence report, Dark Patterns in India's Online Marketplaces, puts the average loss at ₹78 to ₹87 a month per shopper, which aggregates to somewhere between ₹25,000 crore and ₹28,000 crore a year. Nobody disputes a ₹56 handling fee. That is the whole business model. It is engineered to sit just under the amount worth arguing about, in the same quiet way that a subscription storage bill creeps upward while you are not looking.
Twenty lakh rupees recovered against twenty-eight thousand crore lost every year. That is not a deterrent. That is a receipt.
The Thirteen Tricks, In Plain Language
Most coverage lists the thirteen names and stops there, which is useless at the moment you actually need it. What follows is what each family of tricks looks like on a real screen, and the tell that gives it away before you have paid. Seven of the thirteen cover the overwhelming majority of what you will meet in an Indian checkout this year.
| Pattern | What It Looks Like | The Tell |
|---|---|---|
| Drip Pricing | Fees appear only at the final screen | Total moved after you decided |
| Basket Sneaking | Donation, insurance or plan pre-ticked | A line item you never chose |
| Confirm Shaming | Decline button phrased as an insult | Saying no is made to feel rude |
| False Urgency | Countdown timers and stock warnings | Reload the page and the timer resets |
| Subscription Trap | Easy to join, buried to cancel | Cancel needs support, not a button |
| Forced Action | Free thing gated behind your data | You pay in data, not rupees |
| Bait And Switch | Delivered item differs from the advert | Fine print quietly changed the offer |
Read down the Tell column and one thing links all seven. Every single one of them relies on you being in a hurry. None of these survive a reader who stops for ten seconds and compares the total on screen against the number they had in their head when they opened the app. That is not a moral failing on your part, it is arithmetic: the platform has spent years testing that screen and you have spent four seconds on it. The lopsidedness shows up clearly in how widespread each family has become.
Across the platforms Datum Intelligence studied, roughly seven in ten pushed users into choices through forced action, close to seven in ten held charges back until the final step, and more than half advertised one thing and delivered another.
Where This Gets Messy
Now the part the press release will not tell you. The total collected, spread across nine companies, several of which turn over that much before lunch, is not a penalty. It is a filing fee. Zepto's fine costs about what a mid-sized outdoor hoarding costs, levied for a practice that ran on millions of orders. If the arithmetic of a penalty is smaller than the revenue from the behaviour, it becomes a line item, and any finance team can do that sum faster than the regulator can. The pattern is familiar to anyone who has watched a service centre quote against a car's actual value: the number is set at whatever the other side will absorb without complaining.
The self-audit design has the same problem, only politer. Platforms were asked in June 2025 to inspect themselves and remove what they found. Marking your own homework is a reasonable opening move, and I would rather have it than nothing, but the 63% figure earlier suggests how far goodwill gets you. Most of the current enforcement is suo motu or complaint-driven, which means it depends on somebody noticing and somebody escalating. Well, that somebody is you, and there is currently no version of this system where it is not.
There is also a wider point that gets lost in the outrage. Not every pre-ticked box is malice; some are genuine product decisions made badly by a team optimising a conversion metric nobody sanity-checked. That distinction matters for how you respond, because the fix for the first is a complaint and the fix for the second is switching platforms. Either way you are being asked to stay alert during the one moment you are least inclined to, which is the same trap as agreeing to an eSIM activation you cannot easily reverse while a shop assistant waits. The practical watch-outs hold in both cases:
- Guidelines, not statute: the 2023 framework is guidance under consumer law, so remedies stay soft and penalties stay small relative to the money involved.
- Enforcement is reactive: action largely follows complaints or the regulator's own notice, meaning most instances are never seen at all.
- Compliance can be cosmetic: a platform can rewrite one button, keep the underlying flow, and technically satisfy the objection raised.
- The window is closing: the self-audit advisory runs out at the end of this year, and what replaces it has not been set out.
What The Regulator Actually Made Them Change
IndiGo replaced the opt-out wording "No I will take risk" with the neutral "No, I will not add to the trip." One sentence, and the guilt engineering is gone.
BookMyShow was directed to remove a pre-selected ₹1 donation to its BookASmile initiative, treated as basket sneaking regardless of how small the amount was.
Physics Wallah paid ₹5 lakh over a pre-ticked ₹10 donation and for requiring personal details before releasing free courses, and has since dropped both.
So do the boring thing that actually works. Before you open the app, decide the number you are willing to pay, and check it against the final total before you authorise anything, every time, including on the platforms you trust. The standard advice to read the terms is useless here because the terms are not where the money moves. And if the total has grown between the product page and the payment screen, that is a complaint to the National Consumer Helpline with a screenshot attached, not a shrug. The burden of noticing should not sit entirely on the person spending the money. Until it stops doing so, notice anyway.
