All articles
Analysis

ACCC Penalty Escalation: From $0 to $100M in 10 Years

Updated 16 March 20266 min read1,200 words

In 2014, if your website used drip pricing, the ACCC sent you a letter asking you to fix it. In 2024, Qantas paid $100 million. By 2027, penalties will scale to $50 million per breach or 30% of adjusted turnover — whichever is greater.

The penalty escalation for dark patterns and unfair trading practices in Australia has been dramatic, and it's not slowing down. Here's the trajectory every Australian business needs to understand.

The Penalty Timeline: 2014 to 2027

YearCase / EventPenalty / SignificanceMechanism
2014Ticketek drip pricing$0 — voluntary complianceACCC guidance letter
2017Viagogo drip pricingCourt orders + undertakingsFederal Court injunction
2018ACL maximum penalties increased$10M → $50M per breach for corporationsLegislative amendment
2022Uber misleading pricing & cancellation$21 millionFederal Court penalty
2023UCT regime penalties introduced$0 → $50M for unfair contract termsLegislative amendment (Nov 2023)
2024Qantas misleading flight cancellations$100 millionFederal Court penalty
2024Woolworths/Coles illusory discounts$150M+ expectedFederal Court proceedings
2025Microsoft hidden pricing (2.7M customers)$50M+ expectedFederal Court proceedings
2025HelloFresh/Youfoodz subscription trapsPenalties pending (100K+ customers)Federal Court proceedings
2025JustAnswer drip pricing & subscription trapPenalties pendingFederal Court proceedings
2027UTP Bill commencement (proposed)$50M per breach or 30% turnoverNew legislation

The pattern is unmistakable: the enforcement mechanism has evolved from polite requests to nine-figure court orders in barely a decade.

What Changed — and Why

Phase 1: Guidance and Voluntary Compliance (2010–2017)

In the early days of digital commerce enforcement, the ACCC relied primarily on industry engagement. Businesses that used drip pricing or misleading checkout flows received guidance letters and were given the opportunity to self-correct. Penalties were rare and small. The ACCC's approach was educational — it assumed most businesses would fix dark patterns once they understood the issue.

This approach had limited success. Many businesses treated ACCC guidance as advisory rather than mandatory, and the practices persisted.

Phase 2: Federal Court Proceedings and Deterrence Penalties (2018–2023)

The landscape shifted in 2018 when Parliament increased the maximum ACL penalty from $10 million to $50 million per breach for corporations (or three times the benefit obtained, or 10% of turnover — whichever is greatest). This gave the ACCC the tools to seek penalties that would genuinely deter large corporations.

The Uber penalty of $21 million in 2022 was the signal moment. For the first time, a major tech company faced a financially meaningful penalty for misleading pricing and cancellation practices in Australia. The Federal Court made clear that the penalty needed to be large enough to deter a company of Uber's size — not just compensate for harm.

In November 2023, the unfair contract terms (UCT) regime was overhauled. Previously, UCT provisions carried no financial penalties — if a term was found unfair, it was simply voided. The 2023 amendments introduced penalties of up to $50 million for using unfair contract terms. This was a game-changer for subscription-based businesses, where the contract terms often contain the dark patterns.

Phase 3: Nine-Figure Enforcement (2024–Present)

The Qantas $100 million penalty in 2024 shattered previous records. The airline continued to sell tickets on flights it had already decided to cancel, affecting hundreds of thousands of consumers. The penalty wasn't just about compensation — it was designed to send a message to every listed company in Australia.

Immediately after, the ACCC filed against Woolworths and Coles over illusory discount pricing — the “Down Down” and “Dropped” campaigns where prices were temporarily raised before being “discounted” back to near their original level. With 245+ affected products and millions of transactions, the expected penalty is $150 million or more.

See our ACCC Enforcement Roundup for the current wave of cases.

Phase 4: The UTP Bill and Turnover-Based Penalties (2027+)

The Competition and Consumer Amendment (Unfair Trading Practices) Bill 2026 takes enforcement to a new level. Proposed commencement: 1 July 2027.

Key changes:

  • General prohibition on unfair trading practices: Two new legal concepts — “unreasonable manipulation” of consumers and “unreasonable distortion” of the decision-making environment. This captures dark patterns that don't fit neatly into existing s18/s21 categories.
  • Explicit drip pricing ban: Total price disclosure from the first moment a price is displayed. No progressive fee revelation.
  • Subscription contract requirements: Cancellation parity, mandatory renewal notices, limited exit steps.
  • Penalty formula: The greater of $50 million, three times the benefit obtained, or 30% of adjusted turnover. For large companies, the turnover-based calculation will dwarf the flat cap.

For a company with $1 billion in Australian revenue, 30% of turnover means $300 million in potential penalties per breach. This is not a compliance cost — it's an existential risk.

Why Compliance Is Now a Pure ROI Calculation

The economics of dark pattern compliance have fundamentally changed. Consider the maths:

Cost of remediation: A comprehensive dark pattern audit and remediation for a mid-market e-commerce site typically costs $20,000–$80,000. Ongoing monitoring adds $5,000–$15,000 per year.

Cost of non-compliance: Under current law, penalties start at $19,800 for infringement notices (see Dendy Cinemas) and scale to $100 million+ for Federal Court orders. Under the UTP Bill, they scale to 30% of turnover.

The ratio: Even for a small business, the maximum penalty exceeds the remediation cost by a factor of 200x or more. For large businesses, it's thousands-to-one.

This doesn't account for the reputational damage of being named in an ACCC media release, the cost of legal defence, or the consumer redress orders that often accompany penalties. The ACCC can also seek publication orders — forcing the business to publicly admit to the dark pattern on its own website.

For 16 compliance facts that most businesses overlook, see our 16 Things Most Australian Businesses Don't Know About Dark Patterns.

What This Means for Your Business

The penalty trajectory points in one direction: up. The ACCC has the budget, the political mandate, and the legal tools to pursue dark pattern enforcement at scale. And the UTP Bill removes most of the gaps in the current framework.

If you're waiting for the Bill to pass before acting, you're miscalculating the risk. The ACCC is prosecuting under existing ACL provisions today. Every case in our enforcement roundup was filed under current law — sections 18, 21, 29, and 48.

The question is no longer whether dark patterns carry legal risk. It's whether the revenue uplift from manipulative design is worth the downside exposure — and the maths says it isn't.

Find out where your website stands before the ACCC does. Run a free compliance scan at trustscan.com.au/scan.

For a complete reference on every dark pattern type, see our Dark Pattern Glossary. For step-by-step remediation guidance, read the Unfair Trading Practices Audit guide.

Don't wait for enforcement to find you

Run a free TrustScan compliance check and get an ACL-mapped report of your website's dark pattern risk in minutes.

Scan Your Website Free