The Central Consumer Protection Authority (CCPA) has imposed penalties totaling ₹20 lakh on nine digital platforms for violating the Guidelines for Prevention and Regulation of Dark Patterns, 2023. The action targets deceptive design practices that manipulate consumer decisions, including basket sneaking, drip pricing, false urgency, and confirm shaming. Among those penalized are quick commerce major Zepto (₹7 lakh), ed-tech platform Physics Wallah (₹5 lakh), coaching platform Anuj Jindal (₹3 lakh), baby products retailer FirstCry (₹2 lakh), and pharma retailer PharmaEasy, cybersecurity firm McAfee, and airline SpiceJet (₹1 lakh each). BookMyShow and IndiGo received directives to discontinue practices without disclosed monetary penalties.
Zepto faced the highest penalty for two specific violations: adding handling charges during checkout (drip pricing) and automatically including membership fees (basket sneaking). The platform has since discontinued these practices. Physics Wallah was fined ₹5 lakh for automatically pre-selecting a ₹10 donation to its "PW Foundation" during checkout, accompanied by emotionally persuasive messaging to retain the contribution. The regulator also objected to requiring personal information disclosure before accessing supposedly free courses.
BookMyShow was pulled up for basket sneaking—a pre-ticked ₹1 contribution to its BookASmile charitable initiative that users had to manually deselect. IndiGo's violation involved confirm shaming: when users opted out of travel protection, the app displayed "No I will take risk" as the opt-out message. Following CCPA intervention, IndiGo changed this to the neutral "No, I will not add to the trip".
The penalties appear symbolic rather than financially punitive.
BookMyShow, with ₹1,869 crore revenue and ₹192 crore profit in FY25, received no monetary penalty. IndiGo, with approximately ₹95,178 crore in trailing twelve-month revenue, also avoided monetary penalties.
The real financial impact comes from compliance costs and revenue model adjustments. Zepto faces estimated first-year compliance costs of ₹7.25-11.65 crore for technology modifications and operational changes. More significantly, eliminating drip pricing could reduce annual revenue by approximately ₹1,150 crore in the short term, as handling charges contributed roughly 7% of total revenue (~₹1,600 crore annually).
CCPA's targeting decisions reflect a risk-based prioritization framework. Platforms with large consumer bases, high transaction volumes, and clear violations affecting vulnerable demographics received priority. Zepto's multiple violations and massive scale (1.75 million daily orders) made it a high-profile target. Physics Wallah's targeting of students and minors—considered vulnerable consumers—resulted in the second-highest penalty despite smaller revenue.
BookMyShow and IndiGo, as market leaders in their sectors, faced scrutiny for practices that could set industry standards. The absence of monetary penalties for these two suggests CCPA considered their corrective cooperation sufficient, particularly given the relatively minor financial impact of their violations compared to Zepto's systematic pricing manipulation.
The enforcement creates interesting competitive dynamics. In quick commerce, Zepto faces short-term disadvantages as it eliminates dark patterns while competitors like Blinkit and Swiggy Instamart may still be using similar tactics. However, Zepto gains regulatory certainty and a first-mover advantage in building trust-based positioning. The company's IPO plans for 2026 make compliance particularly critical for investor confidence.
BookMyShow, with minimal revenue impact from eliminating pre-ticked donations (₹76.8 lakh annually), can leverage its ethical positioning for brand enhancement in a competitive market against Zomato's District. IndiGo's market leadership (64% domestic share) provides buffer against short-term ancillary revenue losses (estimated ₹153 crore annually from reduced protection plan adoption), while enhanced customer satisfaction could strengthen its dominant position.
All three platforms face trade-offs between short-term revenue optimization and long-term regulatory compliance. Zepto's dark patterns generated an estimated ₹1,800-1,900 crore annually through handling charges and membership auto-enrollment. Eliminating these practices creates significant short-term revenue pressure but positions the company for sustainable growth without regulatory overhang.
BookMyShow's trade-off is minimal—donation revenue was negligible compared to its core business. IndiGo faces moderate pressure from ancillary revenue reduction but gains customer trust and brand reputation benefits. The calculus shifts when considering long-term benefits: improved customer retention (10-15% for Zepto), reduced customer acquisition costs (10-25% reduction), and enhanced brand equity.
CCPA's current enforcement represents Phase 1 of a broader regulatory evolution. The symbolic penalties (₹1-7 lakh) are likely to scale significantly in coming years. Phase 2 (2027-2028) could see penalties ranging from ₹5-25 lakh per violation, while Phase 3 (2029+) may introduce revenue-based penalties up to 1% of segment revenue for systematic violations.
The enforcement creates feedback loops that will expand CCPA's capacity. Current penalty collection of ₹20 lakh is insufficient for major capacity expansion, but the demonstration of enforcement capability will likely drive government funding for technology investments, personnel expansion, and automated monitoring systems. This could increase investigation capacity by 50-75% in the short term and 300-500% in the long term.
The enforcement signals a paradigm shift from conversion optimization through manipulation to ethical design as a competitive advantage. Platforms that invest in proactive compliance—estimated at ₹10-25 crore for large players over 18 months—will gain regulatory certainty, brand trust benefits, and first-mover advantages as enforcement expands.
The competitive landscape will evolve toward trust-based differentiation. Early adopters of ethical design like Zepto, BookMyShow, and IndiGo may face short-term revenue pressure but are positioning themselves for sustainable growth. As CCPA's enforcement capacity grows and penalty severity increases, platforms with robust compliance frameworks will enjoy significant competitive advantages over those clinging to dark pattern tactics.
The message is clear: the era of dark patterns as acceptable business practice is ending.
