What the CMA found
The regulator determined that Marks Electrical (AIM: MRK1) had been adding optional paid-for services to customer orders automatically during the checkout process, as reported by London Loves Business on 18 June 2025. The practice affected thousands of buyers who were charged for extras they had not actively chosen.
The core issue is familiar to anyone who has audited an e-commerce purchase flow: services were bundled into the basket by default rather than being offered as a clear, affirmative opt-in. The CMA treated this as a breach of consumer protection law. The regulator did not merely secure undertakings or issue guidance; it imposed a direct financial penalty of £720,000 and required the company to issue refunds to affected customers.
The specific services involved have not been detailed in full, but Marks Electrical sells large domestic appliances and typically offers add-ons such as installation, recycling of old units, and extended warranties. Pre-selecting any of these during checkout, without explicit customer consent, is the type of conduct the CMA targeted.
The fine in financial context
Marks Electrical is an AIM-listed retailer with annual revenues in the region of £100 million. On a turnover basis, a £720,000 fine looks modest, representing well under 1% of revenue.
However, the company operates in the low-margin world of electrical retail. Appliance sellers typically work on net margins in the low single digits. For a business of this margin profile, a fine of this size is not trivial. It lands alongside the operational cost of processing refunds to thousands of customers, revising checkout systems, and managing reputational fallout.
The penalty should also be read as a signal rather than a ceiling. The CMA's expanded enforcement powers, discussed below, allow for significantly larger fines. This case may represent the regulator calibrating its approach to a smaller retailer rather than setting a cap on future sanctions.
What the new enforcement powers mean for online retailers
The timing of this action matters. The Digital Markets, Competition and Consumers Act 2024 (DMCCA) significantly expanded the CMA's ability to enforce consumer law directly. Before the Act, the regulator's primary route to penalising businesses for consumer-law breaches was through the courts, a process that was slow and resource-intensive.
Under the DMCCA, the CMA can now impose fines directly for breaches of consumer protection legislation, without needing a court order. The maximum penalty available is up to 10% of global turnover, according to the Act's provisions. That upper bound gives the regulator substantial room to escalate in future cases.
This enforcement action against Marks Electrical is one of the early tests of these powers. It establishes that the CMA is willing to use them against mid-market retailers, not just the largest technology platforms or multinational corporations that dominated the political debate around the legislation.
For context, the EU banned pre-ticked boxes in online transactions under the Consumer Rights Directive in 2014. While the UK adopted equivalent rules at the time, enforcement was inconsistent. Post-Brexit, UK regulators are now building their own track record, and the DMCCA gives them sharper tools to do so.
A shift from guidance to penalties
The CMA's previous approach to checkout design issues leaned heavily on guidance and voluntary undertakings. Businesses found to be using aggressive or misleading sales tactics were typically asked to change their behaviour and given time to comply. The Marks Electrical case marks a harder posture: a fine issued alongside a remedial order, with no suggestion that the company was given a prior opportunity to self-correct publicly.
This shift matters for compliance planning. Operators can no longer assume that a first offence will be met with a warning.
Checkout compliance: what operators should review now
Any business selling goods or services online with optional extras at checkout should treat this case as a prompt to audit its own purchase journey. Several design choices now carry clear regulatory risk.
Pre-ticked boxes are the most obvious. If a checkbox for an add-on service, whether installation, insurance, or an extended warranty, is selected by default, the customer has not given active consent. The CMA's action confirms this is enforceable.
Auto-added basket items present a similar problem. Some retailers add services to the basket automatically and rely on the customer to notice and remove them. This is functionally identical to a pre-ticked box and carries the same risk.
Confusing opt-out language is a subtler variant. If the wording around an optional service is designed to make opting out difficult, or if the visual design de-emphasises the removal option, regulators may treat this as a dark pattern even if no box is technically pre-ticked.
Practical steps
Operators should consider the following as part of a compliance review:
- Ensure all optional services require an affirmative action from the customer, such as ticking an unticked box or clicking an "add" button.
- Review basket logic to confirm no items are added without explicit selection.
- Test the checkout flow from the customer's perspective, ideally with someone unfamiliar with the site, to identify any steps where charges could be incurred without clear awareness.
- Document the design rationale for each checkout element. If the CMA investigates, evidence of deliberate compliance effort will matter.
The Marks Electrical case is not a one-off. It is the CMA using new powers on a real business for a common practice. The cost of a checkout audit is trivial compared to the cost of a fine, a refund programme, and the public attention that comes with both.



