Sovereign™ Consumer Protection Handbook

The Sovereign Consumer's Guide to Click-to-Cancel

Post-Vacatur Edition — ROSCA, State ARLs, Payment Revocation & Chargebacks

Privacy Dawg · August 31, 2026 Edition · Educational use only

Accuracy banner: The 2024 FTC Click-to-Cancel amendments to 16 CFR Part 425 were vacated by the Eighth Circuit on July 8, 2025 (Custom Communications, Inc. v. FTC, No. 24-3137). On February 12, 2026 the FTC restored the prenotification-only Negative Option Rule at 16 CFR Part 425 (91 Fed. Reg. 6507). A 2026 ANPRM restarts rulemaking but is not binding. This handbook leads with ROSCA 15 U.S.C. § 8403, FTC Act § 5, state automatic renewal laws, EFTA/FCBA, and card-network dispute tools.
Legal Disclaimer: Privacy Dawg provides educational information and automated technical tools. We do not provide formal legal advice or attorney representation. For jurisdiction-specific disputes, consult a licensed attorney.

Chapter 1 — Dark Patterns Still Exist (Even Without Vacated § 425.6)

Subscription dark patterns did not vanish when the 2024 rule fell. Companies still use:

These practices remain high-risk under ROSCA’s simple-mechanism requirement, FTC Act § 5, the FTC’s 2021 Negative Option Enforcement Policy, and many state ARLs.

Chapter 2 — Federal Arsenal After the Vacatur

2.1 ROSCA (lead statute for online negative options)

15 U.S.C. §§ 8401–8405 require clear disclosure, express informed consent before charging, and a simple mechanism to stop recurring charges (§ 8403).

2.2 FTC enforcement policy (interpretive)

Oct. 28, 2021 FTC Negative Option Enforcement Policy: cancellation should be at least as easy as enrollment and available through the same medium; unreasonable save delays undermine compliance.

2.3 Current 16 CFR Part 425

After Feb 12, 2026 recodification, Part 425 again covers prenotification negative-option plans only. Do not cite vacated 2024 §§ 425.2–425.6 as live law.

2.4 Civil penalties

Where an applicable FTC Act rule violation is established, civil penalties can reach $53,088 per violation (15 U.S.C. § 45(m)(1)(A); 16 CFR § 1.98).

Quick cite sheet 1. ROSCA — 15 U.S.C. § 8403 (simple cancel mechanism) 2. FTC Act § 5 — 15 U.S.C. § 45 3. FTC Negative Option Policy — Oct 28, 2021 (interpretive) 4. 16 CFR Part 425 — prenotification plans only (post-2026-02-12) 5. EFTA / Reg E — 15 U.S.C. § 1693e; 12 CFR § 1005.10(c) 6. FCBA / Reg Z — 15 U.S.C. § 1666; 12 CFR § 1026.13 7. Civil penalty ceiling — $53,088 (16 CFR § 1.98)

Chapter 3 — State Automatic Renewal Laws & California § 17603

State ARLs often supply the sharpest cancel-path and consent rules after the federal vacatur. California’s Automatic Renewal Law (Cal. Bus. & Prof. Code §§ 17600 et seq., including AB 2863 updates) includes online cancel expectations and the § 17603 unconditional gift remedy when goods/services are provided in violation of the article.

Always check your state’s ARL for consent, reminder, and online-cancel specifics (NY GBL §§ 527-a et seq., IL 815 ILCS 601/, VA Code § 59.1-207.45, CO C.R.S. § 6-1-732, WA RCW 19.318, and others).

Chapter 4 — Chargeback Playbook (Visa 13.2 / Mastercard 4841)

  1. Send a dated written cancel + billing-authority revocation (email + retain copy).
  2. If charges continue, open an issuer dispute: Visa 13.2 (Cancelled Recurring) or Mastercard 4841.
  3. Attach Exhibit A (cancel notice), Exhibit B (statements), Exhibit C (screenshots of cancel friction if any).
  4. For ACH, use EFTA stop-payment / revocation with your bank (≥3 business days).

Chapter 5 — Demand Letter Template (ROSCA-first)

FORMAL NOTICE OF CANCELLATION & REVOCATION OF BILLING AUTHORIZATION PURSUANT TO 15 U.S.C. § 8403 (ROSCA) & 15 U.S.C. § 1693e To: Billing Department / Registered Agent, [Merchant Name] Account Identifier: [Account / Email] Date: [YYYY-MM-DD] 1. FORMAL CANCELLATION: Effective immediately, I cancel all subscription, membership, and negative-option billing tied to the above account pursuant to 15 U.S.C. § 8403 (ROSCA) and any applicable state automatic renewal law. 2. REVOCATION OF PAYMENT AUTHORIZATION: Pursuant to EFTA 15 U.S.C. § 1693e and Reg E 12 CFR § 1005.10(c) (and, for credit, FCBA / Reg Z as applicable), I revoke authorization for further recurring charges or preauthorized transfers. 3. CALIFORNIA GIFT NOTICE (if applicable): If California law applies, goods/services provided in violation of Cal. Bus. & Prof. Code §§ 17600 et seq. may be deemed an unconditional gift under § 17603. 4. REGULATORY ESCALATION: Continued unauthorized billing will be reported to the FTC (reportfraud.ftc.gov), CFPB, and my State Attorney General. Applicable FTC Act civil penalties can reach $53,088 per violation (16 CFR § 1.98). Signed: [Name]

Chapter 6 — Attorney General & Federal Complaint Portals

File consumer protection complaints with your state AG and federal portals. Representative links:

FTC — reportfraud.ftc.gov
CFPB — consumerfinance.gov/complaint
California — oag.ca.gov (consumer complaint)
New York — ag.ny.gov
Texas — texasattorneygeneral.gov
Florida — myfloridalegal.com
Illinois — illinoisattorneygeneral.gov
Virginia — oag.state.va.us
Colorado — coag.gov
Washington — atg.wa.gov
Georgia — law.georgia.gov
Pennsylvania — attorneygeneral.gov
Ohio — ohioattorneygeneral.gov
Michigan — michigan.gov/ag
North Carolina — ncdoj.gov
Arizona — azag.gov

Use Privacy Dawg’s in-browser Rights Hub for state selection and zero-knowledge notice generation: /ftc-rights.html.

Chapter 7 — Looking Ahead

The FTC’s 2026 ANPRM may eventually restore nationwide parity-style cancellation rules through a new Magnuson-Moss process. Until a final rule survives judicial review, treat “Click-to-Cancel” as a policy slogan and enforcement theme, not as a citation to vacated 16 CFR § 425.6. Build your paper trail on ROSCA, state ARLs, and payment-law revocation.