Epic Games agrees to pay the FTC $520M to resolve two complaints over allegedly breaking kids' online privacy rules and tricking users into unintended purchases
The agency alleged that the company invaded children's privacy and tricked players of all ages into making unintended purchases
Context & Ripple Effects
Epic Games' $520M settlement is the anchor of an FTC enforcement arc that kept unfolding after this story ran: in March 2023 the agency finalized a $245M fine over Fortnite's unintended-purchase flows and formally banned Epic from using dark patterns. The settlement also sits on a longer lineage — Amazon's 2017 exit from its FTC battle with up to $70M in kid-made in-app purchase refunds set the template for charging platforms for children's accidental spending.
The pattern did not stop with Epic: Microsoft paid $20M to settle COPPA charges over collecting children's data without parental consent, and in 2025 the FTC extracted another $20M from Genshin Impact maker Cognosphere over deceptive prize costs and kids' data handling. Free-to-play monetization and children's privacy have become a repeatable FTC playbook.
First-order effects
- Epic pays out $520M across the two complaints and must rework Fortnite's purchase flows and children's privacy defaults, with the finalized order adding an explicit ban on dark-pattern design.
- Players who were charged unintentionally become the beneficiary class, following the refund structure Amazon accepted in its earlier in-app purchase case.
Second-order effects
- Rival publishers now price in settlement risk as a cost of aggressive monetization: Microsoft's $20M COPPA settlement and Cognosphere's $20M deal show the FTC applying the same pressure across the games industry.
- Compliance around consent flows and purchase confirmations becomes a competitive tax that hits smaller studios harder than Epic-scale companies, pushing some toward platform-level safeguards rather than bespoke ones.
Third-order effects
- If the cadence holds, dark patterns in digital storefronts shift from a design norm to a regulated practice, with the FTC using headline settlements like Epic's to define the boundary for the whole industry.
- Children's data handling in games consolidates into a de facto standard shaped by successive settlements rather than new legislation — enforcement precedent doing the work COPPA updates might otherwise do.
The trend: The FTC is running a sustained enforcement campaign against free-to-play gaming's monetization and kids'-privacy practices, using escalating settlements to write the industry's rules by precedent.