The FTC's largest subscription enforcement action just cost Shutterstock $35 million. The charge: a labyrinthine cancellation process that trapped customers. Here is what this means for every SaaS company — and why knowing who is about to leave is now a compliance strategy, not just a growth tactic.
On May 13, 2026, Shutterstock agreed to pay $35 million to settle FTC charges that its subscription cancellation process was, in the FTC's words, "labyrinthine." Customers who wanted to cancel had to navigate hidden pages, confusing prompts, and multiple confirmation steps designed to wear them down before they could stop paying.
This is the largest FTC enforcement action on subscription practices to date. And it is not an isolated case.
The Enforcement Wave Is Not Coming — It Is Here
The Shutterstock settlement is part of a compounding regulatory environment that SaaS companies can no longer ignore:
**FTC click-to-cancel rule**: The FTC revived its "click-to-cancel" rulemaking, requiring that cancellation be as easy as signing up. This was originally proposed in 2023 and is now back on the agenda with bipartisan support.
**Class-action lawsuits**: NordVPN, Costco, AG1, Peacock, and Amazon Prime have all faced class-action suits over auto-renewal practices in the past 18 months.
**State legislation**: New York City, Arizona, and Pennsylvania have all introduced click-to-cancel bills at the local and state level.
**International action**: The UK government launched a subscription trap crackdown in April 2026 projected to save consumers £400 million per year. The EU Digital Services Act includes subscription provisions. Australia amended its unfair trading practices laws to cover auto-renewal.
**Mainstream business press**: Harvard Business Review published "Should Your Subscription Business Use Auto-Renew?" in May 2026 — a clear sign the regulatory narrative has moved from legal journals to boardroom conversations.
Five distinct signal types converging at the same time is not a news cycle. It is a structural shift.
The Compliance Problem With Reactive Retention
Most SaaS companies handle churn in one of two ways:
**Make cancellation harder** — hidden cancel buttons, multiple confirmation steps, required phone calls. This is exactly what the FTC just penalized at $35 million.
**Win back customers after they cancel** — cancellation flow offers, discount emails, "we noticed you left" sequences. This is legal but increasingly scrutinized.
Both approaches are reactive. They deal with churn after the customer has already decided to leave. The first is becoming illegal. The second is losing effectiveness as consumers get savvy about dark patterns.
Proactive Churn Prediction Is the Compliance Strategy
There is a third approach that sidesteps the regulatory risk entirely: know who is about to cancel before they do, and address their concerns proactively.
This is what churn prediction tools do. They analyze behavioral signals — payment failures, login frequency changes, support ticket patterns, usage rate-of-change — to score each customer on their likelihood of leaving in the next 2-4 weeks.
When you know who is at risk, you can:
Reach out before the customer is frustrated enough to cancel
Offer real solutions (a plan downgrade, a feature walkthrough, a billing fix) instead of last-minute discounts
Reduce involuntary churn (failed payments that the customer did not intend) which accounts for 20-40% of total churn in most SaaS businesses
Avoid relying on cancellation friction — because your customers are not trying to cancel in the first place
This is not just better retention. It is a different approach to retention that does not depend on friction, dark patterns, or cancellation flow tricks. The FTC cannot penalize you for helping customers before they want to leave.
What the $35M Really Costs
The $35 million settlement is the headline number. The real cost is higher:
**Legal fees**: Months of litigation before settlement
**Brand damage**: "Labyrinthine cancellation process" in Reuters, The Verge, Law.com, and 14 other outlets
**Customer trust**: Anyone reading the coverage will think twice before subscribing
**Operational overhaul**: Shutterstock now has to redesign its entire cancellation flow under FTC supervision
For a SaaS startup at $50K-$500K MRR, even a fraction of this exposure would be existential. The FTC is clearly scaling up enforcement from enterprise targets to mid-market companies. The next wave of actions will hit smaller SaaS businesses.
What to Do Now
**Audit your cancellation flow**. Can a customer cancel in the same number of steps it takes to sign up? If not, you have compliance risk. The FTC standard is clear: "easy in, easy out."
**Check involuntary churn**. Are you losing 20%+ of customers to failed payments? Payment recovery (dunning) is legal and effective. But if your "recovery" process includes making it hard to cancel after a failed payment, that is now a risk.
**Add proactive churn prediction**. Tools like SCP (SaaS Churn Predictor) connect to Stripe and score every customer on churn risk daily. When you know who is about to leave, you can address the root cause — not just the cancellation event.
**Monitor the regulatory landscape**. The FTC, state legislatures, and international regulators are all moving. Subscribe to FTC press releases and your industry trade group's compliance updates.
The companies that will thrive in this environment are not the ones with the cleverest cancellation flows. They are the ones who know their customers well enough to keep them without tricks.
SCP connects to Stripe and scores each customer 0-100 on churn risk — so you can reach out before they reach for the cancel button. Free tier available at saas-churn-predictor.vercel.app/pricing.