Loot Box Kill Switch, Real-Money Price Tags, and 6% Turnover Fines: Inside Europe's Leaked Digital Fairness Act

Scheduled for official presentation this Wednesday, November 11, 2026, before the College of Commissioners in Brussels, the full 71-page draft of the European Union's Digital Fairness Act (DFA) has leaked ahead of schedule. Spearheaded by European Commissioner for Democracy, Justice, and the Rule of Law Michael McGrath and drafted by the Directorate-General for Justice and Consumers (DG JUST), the 40-article regulation repeals and replaces the two-decade-old Unfair Commercial Practices Directive (Directive 2005/29/EC) with a directly applicable EU-wide regulation across all 27 Member States. Live-service video games and digital storefronts sit squarely in the crosshairs, facing sweeping binding rules on loot boxes, paid virtual currencies, pay-to-win mechanics, and manipulative interface design.
Article 14: Virtual Currencies Survive an Outright Ban, But Default to 'Off' for Minors
In-game currencies were the single fiercest lobbying battleground in Brussels between the European Consumer Organisation (BEUC), which pushed for an outright ban on intermediate premium tokens, and industry trade body Video Games Europe (VGE). The compromise drafted by Michael McGrath's team stops short of outlawing V-Bucks, FC Points, Robux, or Platinum, but locks them behind two strict legal mandates under Article 14 (and Recitals 62 and 63):
- Mandatory Full-Rate Real-Money Price Tags (Article 14(1)): Any publisher offering paid-for virtual currencies must clearly and prominently display the real-world monetary value in euros (or the local purchase currency) of every virtual item or bundle sold in-game. Crucially, Recital 62 specifies that when virtual currency is sold in discounted bulk tiers, the real-money price displayed next to an in-game item must reflect the full baseline cost without applying quantity discounts or promotional offers. This codifies into hard EU law the enforcement push that began when European regulators forced major publishers to display real-money prices alongside virtual currencies under the Consumer Protection Cooperation (CPC) network.
- Disabled by Default for Under-18s (Article 14(2)): Where a video game is directed at minors, or where the publisher is aware with "reasonable certainty" that the title is played by minors, paid-for virtual currencies must be disabled by default and can only be switched on following explicit prior approval from a parent or legal guardian.

Articles 15 & 16: Mandatory Loot Box Kill Switch for All Players and a Pay-to-Win Ban for Minors
Categorised legally as "paid-for variable reward systems", Article 15 and Recital 64 explicitly target loot boxes, wheels of fortune, and collectible card packs, noting that they share the speculative psychological features of gambling. The draft regulation establishes three cumulative obligations for publishers:
- Strict Odds Disclosure (Article 15(1)): Publishers must clearly and prominently inform players of both the exact types of virtual items available inside a variable reward system and the precise probability of obtaining each item prior to purchase.
- An Accessible Opt-Out Toggle for All Players (Article 15(2)): Publishers must provide all consumers, including adults, with easily accessible and effective tools enabling them to completely disable paid loot boxes and variable reward systems inside the game interface.
- Total Prohibition for Minors (Article 15(3)): Where a game is directed at minors or used by minors with reasonable certainty, publishers are strictly prohibited from offering paid loot boxes, prize wheels, or random card packs (whether purchased directly with fiat money or via paid virtual currencies) to anyone under 18.
Immediately following, Article 16 enacts a blanket ban on pay-to-progress and pay-to-win mechanisms for minors. Recital 66 explicitly calls out "artificial difficulty barriers", throttled progression speeds that render the free-to-play path illusory, and competitive structures where match outcomes are effectively dictated by player expenditure.
The PEGI Legal Trap: Any Game Rated Below PEGI 18 Triggers Minor Protections
How does the European Commission plan to prevent publishers from claiming they had no idea underage players were using their storefronts? The answer lies in Recitals 30, 31, and 63 of the leaked draft, and it represents a massive compliance trap for AAA publishers. To determine whether a product is directed at minors or whether a trader is aware with "reasonable certainty" that minors use it, the regulation relies on objective indicators, explicitly naming the Pan-European Game Information (PEGI) age classification system alongside app store ratings, visual themes, animations, music, and featured influencers.
In practice, any video game carrying a PEGI 3, PEGI 7, PEGI 12, or PEGI 16 rating is legally deemed to be appropriate for and used by persons under 18. Unless a publisher implements strict account-level age assurance to separate adult spenders from underage accounts, any title rated below PEGI 18 will automatically trigger the default virtual currency lock and the prohibition on paid loot boxes and pay-to-win items.
My Field Notes
I can already picture executive legal teams sweating bullets over Recitals 30 and 63. For over a decade, major publishers have wanted it both ways: slapping a family-friendly PEGI 3 or PEGI 12 badge on the box to move tens of millions of copies to kids, while packing the digital storefront with casino-grade card packs and rotating FOMO timers built for adult credit cards. By tying "reasonable certainty" directly to PEGI ratings under 18, Brussels just closed that loophole. And while industry lobbyists managed to save intermediate virtual currencies from an outright ban, forcing studios to slap the undiscounted euro price right next to every 1,200-coin skin is going to shatter the oldest pricing trick in the free-to-play playbook.
Addictive Design Toggles, Daily Streaks, Influencer Liability, and 6% Global Turnover Fines
Beyond microtransactions, Chapter III of the Digital Fairness Act overhauls retention mechanics across digital services. Complements to the upcoming child-safety rules are baked right into the text: while Brussels' proposed EU Kids Act already targets daily login bonuses and FOMO streaks for underage players, Article 17 of the DFA mandates that publishers give adult consumers an easily accessible switch to disable addictive design features individually or all at once:
- Mechanics incentivising engagement at fixed intervals or penalising players through the loss of benefits or daily streaks for failing to log in on schedule (Article 17(1)(c));
- Unsolicited notifications unrelated to the user's direct activity (Article 17(1)(b)) and autoplay features lacking regular deliberation pauses (Article 17(1)(a));
- System behaviours and AI companions that simulate interpersonal relationships to artificially prolong engagement (Article 17(1)(d)).
The draft also tightens the screws on influencer marketing (Article 11), banning direct exhortations to minors to buy products or pester their parents, while making publishers and agencies directly liable by law (Article 11(6)) to ensure contractually that sponsored streamers and creators comply with EU disclosure rules. On the subscription front, Article 20 outlaws silent roll-overs from free trials into paid memberships without both a clear reminder and active express consent from the user, Article 23 mandates a prominent online cancellation button labelled "terminate the contract here", and Article 25 grants consumers the legal right to demand a human interlocutor in post-sale customer support rather than an endless chatbot loop.
According to the European Commission's accompanying impact assessment, the Digital Fairness Act is projected to reduce financial consumer detriment across the bloc by €88.4 billion between 2025 and 2035 (€13.7 billion annually when accounting for monetised time losses), against an adjusted recurring compliance cost of €678 million per year for businesses. Under Article 35(6), severe cross-border infringements investigated directly by the European Commission under the revised CPC Regulation can carry fines of up to 6% of a company's worldwide annual turnover (and at least 4% of national turnover in Member State enforcement actions). Following Michael McGrath's formal unveiling on Wednesday, November 11, 2026, the regulation will head to the European Parliament and the Council of the European Union for negotiations, with enforcement taking effect 12 months after its publication in the Official Journal (Article 40).


















