Epic Pays $520 Million Over Fortnite’s Dark Patterns and Child Privacy Violations

The FTC's two-pronged complaint alleged that Epic Games deployed "dark patterns" — manipulative user interface designs — that caused players of all ages to accidentally charge their credit cards while trying to wake up the game or simply press a button. For example, the game's button layout made it possible to purchase V-Bucks, the in-game currency, with a single press while the player was in a loading screen, leading to unintended transactions. Additionally, Epic allegedly locked out accounts of users who disputed unauthorized charges, threatening to ban them if they did not withdraw the dispute. The $275 million penalty for COPPA violations and $245 million for consumer refunds together constitute the largest FTC order ever issued in a video game context. Epic did not admit liability but agreed to pay and implement compliance reforms, including requiring affirmative consent for all purchases and prohibiting the use of "cancel" and "confirm" buttons that are too close together on the screen.

Fortnite Refund Process: Who Is Eligible and How to Claim Your Money

The FTC established a dedicated refund program to distribute the $245 million consumer compensation fund to affected Fortnite players. Eligibility includes anyone who was charged unwanted in-game currency (V-Bucks) for items they did not intend to buy between January 2017 and September 2022, players whose accounts were locked after disputing unauthorized charges, and parents whose children made purchases without their knowledge during that same period. The FTC will send email notifications and open an online portal where claimants can submit proof of purchases and account details. Crucially, no one needs to pay any fee or share their bank account to apply. The commission anticipates that average refunds may vary widely depending on the number of valid claims, but stressed that the process is meant to be user-friendly, not requiring receipts in most cases. Epic has also been ordered to stop using predictive text entry and other frictionless confirmation mechanisms that bypass thoughtful user consent, ensuring that future purchases require intentional and informed action.

How FTC’s Settlement Reshapes Epic’s Privacy Defaults for Young Players

Beyond refunds, the settlement forces Epic to make sweeping changes to how it handles children's data under the Children's Online Privacy Protection Act (COPPA). The FTC found that Epic collected personal information from players under 13 without notifying parents or obtaining verifiable parental consent, while also enabling voice and text chat by default for all users—including minors—which exposed children to potential harassment and predatory contact. Under the new order, Epic must obtain separate, verifiable parental consent before any child's data is collected, and voice and text chat for players under 13 must be disabled by default. The company must also delete any personal information previously collected from children and certify compliance annually. Epic already introduced stricter parental controls in 2022, but the FTC argued those changes came too late. The policy overhaul is designed to create a safer "metaverse" environment, and the agency has explicitly warned other gaming platforms to review their own default settings or face similar actions.

Epic’s Response and the Broader Impact on Gaming Industry Monetization

In a public statement, Epic Games acknowledged the FTC's concerns but noted that "video game industry practices have changed dramatically" since the alleged incidents, and the company accepted the agreement to move forward. However, the settlement sent shockwaves through the gaming industry, which heavily relies on microtransactions, loot boxes, and frictionless payment systems to maximize revenue. Legal experts say the FTC's focus on "dark patterns" signals a regulatory shift: user interfaces that manipulate or confuse consumers—especially minors—will no longer be tolerated. Companies like Electronic Arts, Activision, and Roblox now face heightened scrutiny over their in-game purchase flows and default privacy settings. Some industry insiders worry that requiring explicit, multi-step confirmations may reduce impulse spending, which underpins a significant share of free-to-play revenue. Yet consumer advocates argue that such friction is exactly what protects vulnerable users, and the settlement could set a precedent for state-level laws regulating digital design manipulation. Epic also agreed to implement a "real-time" purchase notification system for parents, and to provide an annual privacy audit published by an independent third party.