CCPA Fines PhysicsWallah Rs 5 Lakh, McAfee Rs 1 Lakh for dark patterns on digital platforms
New Delhi, June 3
CCPA has fined PhysicsWallah Rs 5 Lakh, McAfee Rs 1 Lakh for dark patterns on digital platforms. The action was taken under the Consumer Protection Act, 2019, the Consumer Protection Rules, 2020, and the Guidelines for Prevention and Regulation of Dark Patterns, 2023. CCPA, headed by Chief Commissioner Smt. Nidhi Khare and Commissioner Shri Anupam Mishra, said the practices interfered with consumers' ability to make free and informed choices.
In PhysicsWallah's case, CCPA took suo motu cognizance and found three violations. A ₹10 donation to the PW Foundation was automatically pre-selected during checkout without explicit consent, which CCPA termed "Basket Sneaking." Emotional messages related to children's education, healthcare and marriages were used to discourage users from removing the donation, identified as "Confirm Shaming." Courses advertised as "free" could only be accessed after users shared personal details like mobile number and email, though CCPA found the content remained the same across accounts, making mandatory data collection unnecessary. This was classified as "Forced Action."
CCPA observed that "consumer consent cannot be assumed through pre-selected options and must always be obtained through a clear and affirmative action," and that advertising courses as "free" without disclosing mandatory registration was misleading. Since a large number of users are students, including minors, the Authority flagged serious consumer protection concerns. PhysicsWallah was found to have violated Section 2(9), 2(28) and 2(47) of the Consumer Protection Act, relevant e-commerce rules, and the Dark Patterns Guidelines.
McAfee Software India was penalised for its subscription renewal interface. Users were shown "Renew Now" and "Accept Risk" as the two prominent options, with the latter suggesting cybersecurity threats if they did not renew. CCPA said the design created pressure to continue subscriptions through "Confirm Shaming," "Interface Interference," "Trick Question" and "Forced Action." The Authority noted consumers should be able to decide freely without fear-based messaging. McAfee violated provisions on misleading advertisement and unfair trade practice under the Act and e-commerce rules.
CCPA reiterated that its Guidelines notified on 30 November 2023 identify 13 dark patterns as unfair trade practices. It had also issued an advisory on 5 June 2025 asking e-commerce platforms to conduct self-audits and remove such designs. The Authority stressed that consumer consent must always be explicit, informed and free from manipulative practices.
— ANI
Reader Comments
While I'm glad they caught PhysicsWallah and McAfee, I think the fines are too small for companies making crores. The real issue is that dark patterns are everywhere now – from food delivery apps to banking apps. Woh 'free' courses ka jhooth toh har app karta hai! CCPA needs to be more proactive and issue stricter guidelines. Also, why only these two? There are dozens of others doing the same thing. 🤔
It's good to see India's consumer protection authorities taking a stand. The 'Confirm Shaming' and 'Forced Action' patterns are particularly insidious. As a digital marketer, I can tell you these tactics are designed to exploit psychological vulnerabilities. However, I wonder how effective a ₹5 lakh fine will be for a unicorn startup. The real change will come when consumers start reporting these practices and companies face reputational damage. Good first step though.
As a student, I feel so validated! I remember trying to access a 'free' course on PhysicsWallah and then being bombarded with calls and messages after I gave my number. It felt like a scam. The donation thing is also terrible – using emotional messages about children's education to guilt trip students into donating. I'm glad CCPA noticed this. But I hope they also look at other ed-tech platforms like Byju's which still has many such problems. Students deserve better! ✊
I appreciate the action, but let's be honest – this is just the tip of the iceberg. Every time I try to unsubscribe from a newsletter or cancel a subscription, I have to jump through hoops. McAfee's 'Accept Risk' button is a classic example. They make it so hard to leave! The government should mandate a 'one-click cancellation' rule like the EU has. Also, why is the fine so small? These companies should face a percentage of their revenue as penalty. But ya, chalo shuruat toh hui hai. 😅