DMCCA 2024: 10% Turnover Fines for Dark Patterns on UK Sites

Quick answer: Under the Digital Markets, Competition and Consumers Act 2024, the Competition and Markets Authority can fine UK websites up to 10% of global annual turnover for three specific patterns: drip pricing, fake reviews and subscription traps. The CMA no longer needs a court order to do this. Drip-pricing and fake-review rules commenced 6 April 2025. Subscription rules are expected Autumn 2026.

The substantive prohibitions on unfair commercial practices were not dramatically changed by the Act. What changed is the enforcement mechanism. Before DMCCA the CMA had to apply to court to impose financial penalties, which made enforcement slow and expensive. The direct-fining power means the CMA can now act more like the ICO does in data-protection enforcement: investigate, issue a notice of intent, allow representations and issue a penalty notice without court proceedings.

For a technical check of whether your site includes patterns the CMA has identified as non-compliant, run a free scan at /uk/en/scan.

What the CMA can fine you for under DMCCA Part 4

Verify current commencement dates at legislation.gov.uk before relying on these timelines for compliance decisions.

What the DMCCA 2024 is and what it replaced

The Digital Markets, Competition and Consumers Act 2024 received Royal Assent in May 2024 and came into force in stages. Part 4 of the Act governs unfair commercial practices. It replaces and extends the Consumer Protection from Unfair Trading Regulations 2008, which transposed the EU Unfair Commercial Practices Directive.

The substantive prohibitions on unfair commercial practices were not dramatically changed: misleading actions, misleading omissions and aggressive commercial practices were already prohibited. What changed materially is that the DMCCA adds specific targeted provisions on drip pricing, fake reviews and subscription contract design and gives the CMA direct enforcement powers that did not exist under the previous regime.

Under the pre-DMCCA framework, the CMA could investigate and reach undertakings but needed to apply to court to impose financial penalties. This made the enforcement process slow and expensive. The DMCCA's direct-fining power means the CMA can now act more like the ICO does in data-protection enforcement: investigate, issue a notice of intent, allow representations and issue a penalty notice without court proceedings.

Drip pricing

Drip pricing occurs where a headline price is advertised but mandatory fees are added incrementally as the consumer progresses through the checkout. The final price paid is materially higher than the initial price displayed. The CMA's draft guidance on DMCCA Part 4 identifies drip pricing as a priority enforcement area.

Under the DMCCA, displaying a price that omits mandatory components is a misleading action under section 230. Mandatory components include booking fees, service charges, administration charges and any other cost the consumer must pay as part of the transaction. These must be included in the headline price or clearly displayed alongside it from the first moment the price is shown to the consumer.

The e-commerce patterns most commonly investigated in the CMA's pre-DMCCA and transitional enforcement work include: flight and event ticketing sites that add per-booking fees only in the final checkout step, subscription services that advertise a monthly price before tax and platform fees and accommodation platforms that show nightly rates before mandatory cleaning or resort fees.

A compliant implementation shows the total mandatory price, including all compulsory components, from the first price disclosure. Where a dynamic component such as delivery cost cannot be calculated until the consumer selects their location, that is acceptable, but the existence and basis of the additional charge must be disclosed early.

Fake reviews

The DMCCA explicitly prohibits commissioning fake reviews, submitting fake reviews and hosting reviews without taking reasonable steps to prevent fake ones. Schedule 19 of the DMCCA lists fake reviews as a specific commercial practice that is unfair in all circumstances.

For a UK website that publishes customer reviews, this creates an obligation to have a verification process. Platforms cannot simply display any submitted review without any checks. The standard is "reasonable steps," which the CMA has indicated includes checking reviewer identity against purchase history for verified purchases, implementing detection mechanisms for bulk or patterned submissions and having a process for removing reviews identified as fake.

The prohibition also extends to incentivised reviews where the incentive is not disclosed. Asking customers to leave a review in exchange for a discount or gift, without disclosing this in the review itself, creates a misleading impression about the authenticity of the review.

Subscription traps

The DMCCA's subscription contract provisions specifically govern auto-renewing contracts. The provisions require: clear information about ongoing charges before sign-up, a reminder notice before each renewal that the consumer did not specifically select and an easy cancellation mechanism that is at least as simple to use as the sign-up process.

The subscription provisions were delayed in commencement and are expected to take effect in Autumn 2026. Verify the current position at legislation.gov.uk before assuming they are in force.

Even before formal commencement of the subscription-specific provisions, subscription designs that make cancellation unreasonably difficult fall under the general unfair commercial practices prohibitions. A multi-step cancellation flow that requires a phone call when sign-up was online or that presents multiple retention offers and barriers before allowing cancellation, is potentially an aggressive commercial practice under the pre-existing DMCCA provisions.

The CMA's new direct enforcement powers

The DMCCA's most operationally significant reform for businesses is Schedule 6, which gives the CMA direct enforcement powers. The CMA can now:

• Investigate suspected unfair commercial practices.
• Issue information notices requiring evidence.
• Conduct formal investigations.
• Issue a provisional decision with proposed remedies.
• Allow representations from the business.
• Issue a final infringement decision with financial penalties.

All of this happens without court proceedings.

Penalties under DMCCA Part 4 can reach 10% of global annual turnover. For individual officers of businesses found responsible, penalties can reach £300,000. Daily penalties for continuing breaches can be up to 5% of daily turnover.

Businesses have the right to appeal CMA decisions to the Competition Appeal Tribunal. Unlike ICO appeals (where the fine is suspended pending appeal), the DMCCA enforcement regime requires checking current procedural rules on payment timing at appeal.

Practical patterns to audit on your site

The CMA's enforcement focus, based on its published market investigations and case decisions, has consistently targeted practices in e-commerce, ticketing, subscriptions and digital services. The checklist for a UK e-commerce site includes:

Whether the checkout total matches the first price displayed to the consumer, with any difference fully accounted for by optional selections (not mandatory fees added later). Whether any mandatory fee that was not in the first-displayed price is disclosed clearly before the consumer commits to purchase. Whether customer reviews come from verified purchasers or have a disclosed methodology. Whether subscription sign-up and cancellation are equivalent in effort. Whether countdown timers or stock scarcity indicators reflect genuine real-world constraints or are artificially generated to create pressure. Manufactured urgency ("only 2 left" when inventory is not genuinely limited) is a misleading action under DMCCA Part 4.

CMA enforcement before DMCCA: the track record

The CMA's pre-DMCCA enforcement under the Consumer Protection from Unfair Trading Regulations 2008 and the Enterprise Act 2002 established the patterns the new regime builds on. Cases that are directly relevant to website design include:

The CMA's investigation into online secondary ticket platforms, which found drip pricing and misleading availability indicators, resulted in undertakings requiring transparent fee disclosure before 2024. The CMA's investigation into fake online reviews across multiple sectors produced reports identifying the scale of the problem and the business models that enabled it. These investigations produced no fines under the old regime because the CMA lacked direct-fining power. The DMCCA changes that structural limitation.

The CMA's investigation into subscription services, opened before DMCCA commencement, found patterns including: sign-up processes that were significantly easier than cancellation, retention offers that delayed but did not enable cancellation and notification practices that failed to remind consumers before renewal charges. These findings informed the DMCCA subscription contract provisions.

For current open cases and published guidance, the CMA's case pages at gov.uk/cma-cases are the authoritative reference. DMCCA enforcement is new and the published decision register will grow through 2026 and 2027.

How DMCCA differs from EU DSA and UCPD

UK businesses with EU customers may be subject to the EU's Digital Services Act and the EU's Unfair Commercial Practices Directive alongside DMCCA. These are separate regimes with overlapping but distinct obligations.

The EU Unfair Commercial Practices Directive (UCPD), as revised by Directive 2019/2161 (the Omnibus Directive), covers similar ground to DMCCA Part 4 but is implemented differently across EU member states. France's DGCCRF, Germany's Wettbewerbszentrale and the Netherlands' ACM each enforce the UCPD under their national implementing legislation, with different fine structures and enforcement styles.

The EU DSA imposes additional obligations on platforms and intermediary services based on user numbers and platform type. DMCCA does not have a direct equivalent to the DSA's large-platform obligations, though the CMA's concurrent powers under the digital markets provisions of DMCCA create some functional overlap for the largest platforms.

For UK businesses selling only to UK consumers, DMCCA is the relevant regime. For businesses with EU customers, both DMCCA and the applicable EU national implementations of UCPD may apply simultaneously. The substantive prohibitions on drip pricing and fake reviews are similar enough that a single set of compliant practices typically satisfies both regimes, but the enforcement exposure is doubled. For the data-protection overlap in customer-data handling during checkout, see UK GDPR fines under the ICO. For related mandatory disclosures, see Companies House website disclosures and the Consumer Rights Act 2015 disclosures. For how the DMCCA fine structure works in detail, see DMCCA fines: what 10% global turnover means.

Frequently asked questions

What is the DMCCA 2024?

The Digital Markets, Competition and Consumers Act 2024 is a UK statute that gives the Competition and Markets Authority direct powers to fine businesses for unfair commercial practices, including dark patterns. It replaced and consolidated aspects of the Consumer Protection from Unfair Trading Regulations 2008 and added specific new prohibitions on drip pricing, fake reviews and manipulative subscription designs.

What dark patterns does the DMCCA prohibit?

The DMCCA 2024 Part 4 prohibits unfair commercial practices broadly and specifically addresses drip pricing, fake or misleading consumer reviews, subscription designs that make cancellation harder than sign-up and pressure-selling techniques that create false urgency.

Can the CMA fine a business directly for dark patterns under DMCCA?

Yes. The DMCCA 2024 gave the CMA direct administrative fining powers for the first time. Previously the CMA had to obtain a court order to impose financial penalties. Under the DMCCA, the CMA can issue a penalty notice directly, with fines up to 10% of global annual turnover for businesses and up to £300,000 for individuals.

When did DMCCA dark-pattern enforcement start?

The drip pricing and fake review provisions of DMCCA Part 4 commenced on 6 April 2025. The subscription contract regime provisions were delayed and are expected to come into force in Autumn 2026. Verify current commencement dates at legislation.gov.uk before relying on these timelines.

---

This is technical analysis, not legal advice. Consult a solicitor for specific guidance on DMCCA compliance for your business.