Why auto-renewal offers get challenged under ROSCA

A company does not usually get an FTC or state-attorney-general problem because one subscriber overlooked a renewal email. It gets one because the machinery behind the offer — what terms the buyer saw before the card was taken, how the company captured consent, and how easy it actually was to stop the charge — crosses the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8403. The statute is unusually concrete about where this happens, and the problems cluster into a handful of places. If you publish an online auto-renewing or "negative option" offer — a free trial that converts to a subscription, a membership that renews, an add-on billed after checkout — learning these beats memorising the U.S. Code, because each is a place where a well-meaning growth team and a deceptive one end up writing the same signup page.

1. Material terms not disclosed before billing

The first duty is disclosure. ROSCA § 8403 bars sending or receiving an order for goods or services through the internet via a negative-option feature unless the offer clearly and conspicuously discloses all material terms before obtaining the consumer's billing information. For a trial or subscription, "material terms" means at least the renewal price and the renewal date or cadence — how much will be charged, and how often. The plain cases are obvious: a "Start your free trial" button with no dollar amount anywhere near it, or a "Join now" that never says the membership renews monthly at $29.99. The quiet cases are what catch teams out: the price lives only in a linked policy page, the cadence is phrased as "billed periodically" with no number, or the trial-to-paid switch happens on a date the copy never states. The statutory framing of the whole scheme — why Congress found that negative-option marketing on the internet needed a federal floor — is set out in § 8401 (findings and declaration of policy). The mechanical tell for a pre-check is a recurring-charge offer whose enrollment copy shows no price and/or no cadence.

2. Consent by default, pre-check, or silence

The second duty is consent. § 8403 requires the seller to obtain the consumer's express informed consent before charging the card. Wording that enrolls the buyer automatically, presents a pre-checked subscribe box, or treats silence, a single "continue" click, or "by checking out you authorize…" as agreement does not capture an affirmative, informed yes to the recurring charge. "You'll be automatically enrolled," "we'll sign you up unless you opt out," and a default-on checkbox are the patterns that read as consent to a hurried shopper but are not express informed consent to the statute. The honest fix is a distinct, un-pre-checked opt-in that restates the price and cadence at the moment of agreement. Whether your actual control is genuinely un-pre-checked is a fact about the rendered page, not the wording — a pre-check can flag the pattern, it cannot see your form.

3. Cancellation that is hard to reach

The third duty is a way out. § 8403 requires the seller to provide simple mechanisms for a consumer to stop recurring charges after the initial transaction. Copy whose only stated way to cancel is to call customer service during business hours, send a certified letter, visit a store in person, or survive a multi-step retention script — with no online, self-serve route — describes exactly the friction the statute targets. This is a recurring theme in FTC subscription actions, and enforcement is expressly shared: the FTC polices these duties under § 8404 (enforcement by the Federal Trade Commission) and state attorneys general under § 8405 (enforcement by State attorneys general). A pre-check flags "call to cancel" and "must write to end your membership" against the absence of a self-serve route; it cannot test whether your cancellation button actually works.

4. Misdescribed offers, and a charge from someone else

Two more patterns round out the picture. First, misrepresentation: pairing "free," "no obligation," or "cancel anytime" with a charge that in fact starts automatically, a credit-card requirement, or a restricted cancellation misleads the buyer about the negative-option terms. That is actionable under § 8403, and it echoes the prohibition on misrepresenting material facts in the surviving 16 CFR § 425.3 (misrepresentations) of the Prenotification Negative Option Plans rule (16 CFR Part 425). Second, a post-transaction third-party charge: ROSCA § 8402 bars a partner or affiliate from billing a consumer's card using billing information collected in an earlier, different transaction unless that third party separately disclosed its own material terms, obtained its own express informed consent, and offered its own simple cancellation. "Add our protection plan for $9.99/mo to the card you just used" and "one easy checkout" bundled with a partner membership implicate this rule.

Why the published statute alone does not protect you

ROSCA is public and readable today. What publication does not do is sit inside a marketer's head the afternoon a trial launch is being built. The statute is written as duties and timing; a signup hero is written as "Start free. Cancel anytime." The translation layer — "does this enrollment copy show the renewal price and cadence before billing, capture an affirmative opt-in, and offer a self-serve way out?" — is where teams miss, and it is exactly the layer a deterministic pre-check can own. One honesty note belongs front and center: the FTC's 2024 "Click-to-Cancel" amendments to 16 CFR Part 425 were VACATED by the Eighth Circuit in 2025. Whatever click-to-cancel specifics you read about are not current federal law; the surviving federal backbone is the ROSCA statute above.

What a pre-check should report — and should not

A good tool reports the wording pattern, the ROSCA duty it maps to, and a concrete edit, ranked so missing pre-billing terms, default consent, and phone-only cancellation come first. A dishonest tool declares your subscription offer "ROSCA-compliant." No text checker can say that, because whether the opt-in is genuinely un-pre-checked, whether the cancellation path actually works, whether a renewal reminder was ever sent, and how the terms render before billing all live outside the copy. A pre-check is a published-duty-shaped second pair of eyes on your wording, and nothing more.

Heuristic pre-check only — not a subscription-compliance certification or legal advice. No consent-control, cancel-flow, reminder-delivery, or enforcement verification is performed by any wording-only checker, including the one that links to this article. Federal basis is ROSCA (15 U.S.C. §§ 8402-8403); the FTC 2024 "Click-to-Cancel" amendments to 16 CFR Part 425 were VACATED by the Eighth Circuit in 2025 and are NOT asserted as current law here; state auto-renewal laws are advisories only, never quoted. For a binding view on a specific offer, consult ROSCA, 16 CFR Part 425, and a qualified professional.