The Setup: “Free” Was Never Free

Fortnite launched in July 2017 and quickly became one of the most-downloaded games on the planet, with more than 400 million registered users. Epic plastered the word “Free” on every download button, every category listing, every storefront page. The word “Free” was the hook that pulled hundreds of millions of people, many of them kids, into the ecosystem.

Once inside, Epic quietly saved your payment information by default the moment you made any purchase on the Epic Games Store. Epic did not tell you it was doing this. Epic did not ask for permission. The company’s own Senior Producer acknowledged in writing that “many people didn’t even realize it [their credit card] was saved.”

Kids then used those silently saved cards to buy V-Bucks — Fortnite’s virtual currency — with nothing standing between them and a charge. Epic required no PIN. Epic required no password. Epic required no parental confirmation of any kind. A child pressing a button on a PlayStation controller was all it took to drain a parent’s bank account.

They Knew. They Watched Amazon, Apple, and Google Get Caught First.

Epic started billing consumers for in-game charges despite knowing that the FTC had already taken public action against Amazon, Apple, and Google for the exact same practice: failing to get parents’ consent before charging them for kids’ in-app purchases. The FTC complaint names those cases by citation. Epic saw those cases. Epic built its billing system anyway.

It was not an oversight. It was a business decision.

A Timeline of Chosen Inaction

Epic’s employees raised alarms from spring 2018 onward. The company moved slowly, partially, or not at all for years. Every delay represents millions of additional unauthorized charges. The chart below maps Epic’s pattern of known harm against the dates it finally acted.

Designed to Trap: The Dark Pattern Playbook

Epic engineers did not accidentally build a purchase system that charged people by accident. The FTC complaint documents a specific, deliberate design philosophy: make buying instant and irreversible, and make canceling slow, hidden, and frustrating. These are called “dark patterns” — interface designs engineered to override user intentions and extract money.

The One-Button Trap

On mobile devices, the “PURCHASE” button sat directly adjacent to the “PREVIEW STYLES” button. A player who wanted to look at outfit options and tapped even slightly off-target was immediately charged. On PlayStation controllers, the purchase button was the same physical button used for entirely different actions in other areas of the game — meaning players who switched contexts could trigger a charge just by muscle memory. Epic required zero confirmation steps. Zero. One touch. Gone.

The company’s own Lead of Online Gameplay Systems admitted in a March 2019 email that he was personally “VERY careful when I am in the shop to the extent I am a little paranoid of bumping the controller.” One of Epic’s own engineers was scared of his own company’s purchase system — and still the company left it unchanged for years.

They Shrank the Refund Button on Purpose

When Epic finally introduced an “Undo” button in June 2019, too many people used it. According to Epic’s own customer survey, “‘I accidentally purchased an item I did not want’ was the number one ‘reason’ for using the ‘Undo’ button.” That data — proof that their purchase design was causing mass accidental charges — prompted Epic to make the cancel option worse, not better.

Epic renamed the button “Cancel Purchase,” shrank it, moved it to the bottom of the screen, and required players to hold the button down to activate it, even though purchasing required no such effort. A Senior Product Manager then recorded a roughly 35% decline in the net undo-rate following these changes. Epic measured the success of hiding the cancel button. That is not an accident. That is a strategy.

They Buried the Refund Path in Settings

To request a refund through the Fortnite app, users had to navigate to the “Settings” tab. Not the purchase screen. Not a help menu. Settings. The UX designer who built this path wrote that he placed it there in “an attempt to obfuscate the existence of the feature” and that not a single test user found it during user testing. When he asked a superior if he should make it easier to find, the answer was: “it is perfect where it is at.”

Epic then imposed a lifetime maximum of three refunds per account. Miss the hidden button three times, or use your three tokens on legitimate accidental purchases, and you are locked out of the refund system forever — regardless of how many unauthorized charges Epic bills you for afterward.

The Non-Financial Ledger: What Money Cannot Measure

The $245 million fine ($245,000,000 — enough to pay four years of college tuition for roughly 6,000 students at an average public university) grabs headlines. What the headlines miss is the texture of betrayal that millions of families experienced while Epic’s leadership read internal memos and chose to do nothing.

Consider the parent who authorized a single purchase for their 11-year-old, trusting that Epic had processed the transaction and moved on. Epic kept the card. Eight days later, that parent’s account had been charged an additional $140 ($140 — the average American grocery budget for a family of four for a week) in purchases the parent never approved. That parent had extended good faith. Epic responded by treating that good faith as an exploitable resource.

Consider every family who, upon discovering unauthorized charges, did the exact right thing: they called their bank, disputed the charge, and expected the legal protection of the Fair Credit Billing Act to make them whole. Instead, Epic responded to that legal act of self-defense by permanently banning their Fortnite accounts. Everything they had ever purchased — every skin, every emote, every item earned over months or years — was erased. Epic did not refund those items. Epic used account deletion as punishment for exercising a federal legal right.

The emotional weight of this for children cannot be overstated. A parent banning a kid from a game is one thing. A corporation reaching into that kid’s digital life and wiping out years of accumulated items — including items the child had saved up for, or received as gifts, or earned through gameplay — because the child’s parent dared to call their bank, is a different category of harm entirely. Epic targeted the most emotionally invested users on the platform — children — and weaponized that investment against their families.

Epic’s own employees felt the wrongness of it. A Community Coordinator sent escalating emails from July 2018 through April 2019, documenting player complaints, describing specific technical problems causing accidental charges, and explicitly asking whether anything was being done. The emails went largely unanswered or were deflected. An employee doing their job correctly, raising legitimate consumer protection concerns, was effectively ignored. The culture at Epic was not one of missed signals — it was one of deliberately managed inaction. Leadership knew the price of fixing the problem: fewer impulse purchases. They chose the revenue.

More than one million consumer complaints about unwanted charges landed at Epic. The FTC complaint notes that “Unrecognized and Fraudulent Charges” ranked among the top five reasons people contacted Epic’s support team. Epic had a real-time, quantified picture of the harm it was causing. It built dashboards to track that harm. It ran surveys to measure it. It did not fix it. Instead, it optimized the system to reduce the rate at which people could escape charges they never wanted.

Legal Receipts: Their Own Words

These are direct quotations and factual statements from the FTC’s complaint and the agency’s Decision and Order. Every word below came from official documents.

The Math of Impunity

Epic billed more than $4 billion ($4,000,000,000 — more than the GDP of some small nations) in V-Bucks charges, many of them unauthorized, before implementing basic consent safeguards. The FTC fined them $245 million ($245,000,000 — roughly the cost of 1.7 million tanks of gas). The fine represents approximately 6.1% of the total billing identified in the complaint. The chart below makes that ratio visible.

Societal Impact Mapping

Economic Inequality: Who Gets Hurt When Big Tech Steals by Design

The families who complained to Epic about unauthorized charges were not complaining about abstract inconvenience. They were describing real financial injuries: $500 (enough to cover a week of groceries for a family of four for over two months) charged to a parent’s card by a 10-year-old; $140 ($140 — roughly a month of electricity for a low-income household) billed without consent in eight days; accounts banned with hundreds or thousands of dollars of previously purchased content permanently deleted, with no refund. For low-income families, those amounts are not trivial. They are rent shortfalls. They are grocery deficits. They are medical bill cascades.

Epic’s design choices did not affect all consumers equally. Children, whose impulsive decision-making is a documented neurological reality, were specifically and disproportionately exposed. Parents who trusted a “Free” label and did not read the fine print buried at the bottom of a download page were the target. The consumers most likely to miss the tiny opt-out checkbox, the most likely to not notice the shrunken cancel button, the most likely to have already used their three lifetime refund tokens, were the consumers least equipped to absorb financial shocks. Dark patterns are a regressive tax on confusion.

Epic compounded the inequality by weaponizing the chargeback process. The Fair Credit Billing Act exists specifically to protect consumers who cannot otherwise fight corporations with vast legal resources. When Epic banned every account that filed a chargeback — regardless of whether the chargeback was upheld — it functionally penalized people for using consumer protection law. The consumers most likely to resort to a bank chargeback are those who have already exhausted all other options. Epic targeted those people specifically, stripping them of everything they had purchased, permanently.

Public Health: Children as the Deliberate Target

The FTC complaint explicitly documents that Fortnite “is popular among kids” and that Epic’s own definition of “ordinary consumers” in the consent order requires accounting for the specific vulnerabilities of children as an audience. Children’s developing brains are structurally less capable of impulse control, risk assessment, and understanding the real-world consequences of digital actions. Game design research has long established that children are particularly susceptible to one-click purchase mechanics, time pressure, and the social anxiety of missing out on limited-time cosmetic items.

Epic knew its core audience included children. Epic knew children were making unauthorized purchases at scale — “Unrecognized and Fraudulent Charges” was a top-five support complaint category. Epic continued designing a purchase flow with zero friction for buying and maximum friction for undoing, inside a game marketed aggressively to minors. The FTC’s consent order specifically mandates that Epic’s disclosure standards must account for “when the representation or sales practice targets a specific audience, such as children.” That language exists because Epic’s practices were, by any reasonable reading, targeted at children’s psychological vulnerabilities.

The “Cost of a Life” Metric

What Now? Here Is What You Can Actually Do.

The FTC has issued a permanent injunction. Epic is banned from charging consumers without express informed consent, and banned from denying account access to anyone who disputes a charge. The order runs for 20 years. That matters — but only if someone is watching.

Watchlist: Who Has Jurisdiction

• Federal Trade Commission (FTC) — filed and enforced this action; holds the consent order
• Consumer Financial Protection Bureau (CFPB) — has jurisdiction over billing and credit disputes
• State Attorneys General — many states have independent consumer protection authority and can act independently of the FTC
• Financial institution dispute departments — if you have been charged without consent, file a chargeback; that right still exists and is protected by the Fair Credit Billing Act

Roles to Watch at Epic Games

• Chief Executive Officer of Epic Games, Inc.
• Chief Product Officer / Head of Fortnite Product
• Director of Player Support
• Lead of Online Gameplay Systems
• Head of UX Design (Fortnite purchase flows)

The consent order requires Epic to submit compliance reports annually for 10 years. Those reports are public record. Demand your local consumer advocacy groups and gaming journalism outlets file FOIA requests for each one. Support organizations that do digital rights and child consumer protection work at the local and state level. Talk to other parents. Talk to your kids about dark patterns — name the technique, so they can recognize it everywhere, because Epic is not the only company using it.