The short answer: Most software subscriptions don’t end when you stop using them — they end when you stop paying, and the contract decides how hard that is. The four traps that cost small businesses the most are free trials that convert to paid plans without a clear warning, annual plans that renew at full list price after an intro discount, non-renewal notice windows (often 30 days) buried in the terms, and price hikes applied at renewal. The federal click-to-cancel rule that would have banned the worst of this was vacated in July 2025 — so enforcement now runs through a 2010 statute (ROSCA) plus a fast-moving patchwork of state laws, enforced company by company. The defense is procedural, not legal: calendar every renewal with its notice deadline, keep the signup terms, and test the cancellation flow before you need it.
This is the buyer’s-side companion to our [SaaS contract red-flags guide](/software/saas-contract-red-flags/) — read the contract one to learn which *clauses* to fight, and this one to learn which *moments* cost you money. And our [SaaS true-cost calculator](/software/saas-true-cost/) models what a renewal price hike does to a three-year total.
This guide is educational, not legal advice. Auto-renewal law is state-specific and changes frequently — nothing here tells you whether a specific vendor charge is lawful, and we don’t give verdicts on individual vendor disputes.
The four traps, in the order they take your money
1. The trial that converts to paid
The pattern: you start a 14- or 30-day “free trial,” hand over a card “for verification,” get busy, and get billed. California’s amended auto-renewal law now covers this explicitly — free trials that convert to paid subscriptions are treated as automatic-renewal offers, meaning the vendor needs your express affirmative consent for the conversion, not just the trial, and must tell you the price that will hit after the trial ends (Cal. Bus. & Prof. Code §17602, as amended by AB 2863, eff. July 1, 2025). Maryland’s 2026 law (in effect June 1, 2026) requires notice before a trial or introductory discount ends.
This was also the heart of the FTC’s Instacart case: the agency alleged hundreds of thousands of consumers were enrolled in paid Instacart+ memberships because the free-trial enrollment never clearly disclosed that the trial would convert to a paid subscription at the end.
2. The intro discount that renews at full list
The pattern: first year at $12/user/month, “50% off for year one” — renewal bills at $24/user/month and nobody told you. For a 10-seat team, that’s $1,440 becoming $2,880 at the first renewal, on software the team may barely use. The intro price was the quote you evaluated; the renewal price is the price you actually pay, and it rarely appears anywhere near the original proposal.
Vendors are required in several states to disclose how pricing changes when the introductory period ends — but “required” and “prominently displayed” are different things. The defense is to treat the renewal price, not the intro price, as the number you budget for, and to confirm it in writing before signing.
3. The notice window you missed
The pattern: the order form says you must give written notice 30 days before the renewal date to avoid another 12-month term. You decide to cancel on day 29. You now own another year.
This is the single most expensive clause type in small-business software — more expensive than the price hike, because it multiplies the price hike by 12 months. Renewal-notice windows of 30, 60, or 90 days are common; the window is almost always measured backward from the renewal date, and the renewal date is almost never the date you’re thinking of (it’s the date on the order form, which may not match the date you started using the product).
4. The price hike at renewal
The pattern: renewal quote arrives 20% higher than last year, justified by “annual pricing adjustments,” and it’s take-it-or-leave-it with a deadline. Many contracts give the vendor the unilateral right to raise prices on renewal — the question your order form answers is whether the increase is capped (“up to 10% annually”) or uncapped. Uncapped renewal uplifts are common, and switching costs (covered in our lock-in guide) are what make them stick: when migrating is a six-week project, you renew at whatever number they name.
Several states now require advance notice of fee changes — New York’s updated law (in effect November 5, 2025) requires either advance consent to a price increase or a penalty-free cancellation window with a pro-rated refund after the increase. California’s amended law requires advance notice of material fee changes as well.
Why nobody is coming to save you (yet): the enforcement landscape
Here is the honest legal backdrop, as of October 2026.
There is no federal click-to-cancel rule. The FTC finalized one in October 2024. The Eighth Circuit vacated it on July 8, 2025 — on procedural grounds, days before the compliance date. The FTC issued an Advance Notice of Proposed Rulemaking on March 11, 2026, asking whether a new rule is even necessary; comments closed April 13, 2026, and no replacement rule or timetable has been announced. Anyone who tells you “the FTC banned” hard-to-cancel subscriptions is describing a rule that does not exist.
What does exist is ROSCA — and it has teeth. The Restore Online Shoppers’ Confidence Act (15 U.S.C. §§ 8401–8405, enacted 2010) requires online sellers to clearly disclose material terms, obtain express informed consent before charging, and provide a simple mechanism to stop recurring charges. Violations carry civil penalties of $53,088 per violation (the 2025 inflation adjustment — note that OMB announced no inflation adjustment for 2026, so this figure stands). The FTC enforces it company by company, and the recent docket is a warning to any business that thinks dark patterns are a marketing tactic:
| Case | Announced | Amount | What the FTC alleged |
|---|---|---|---|
| Amazon (Prime) | September 2025 | $1B civil penalty + $1.5B consumer redress | Enrolling consumers in Prime without consent; making cancellation deliberately difficult (the internal “Iliad” flow). Settled mid-trial. |
| Chegg | September 15, 2025 | $7.5M | Cancellation buried behind menus, multi-step “retention” flows; ~200,000 consumers charged after attempting to cancel. |
| Instacart | December 18, 2025 | $60M in consumer refunds | Free trials converting to paid Instacart+ without clear disclosure; “free delivery” masking mandatory service fees. |
| Shutterstock | May 13, 2026 | $35M | Charging without informed consent, undisclosed auto-renewal terms, difficult cancellation; complaint and stipulated order filed together. |
Note on Amazon: this isn’t over. In September 2026 the FTC announced accelerated, expanded redress — more consumers qualify, and the individual payment cap rose from $51 to $200. Enforcement momentum is still building, not fading.
The real regime is the states. Roughly 30 states have some form of auto-renewal law, and 2026 has been a busy year. California’s amended law (AB 2863, eff. July 1, 2025) is the strictest: free-trial conversions explicitly covered, express affirmative consent kept separate from the rest of the contract, same-medium cancellation, annual renewal reminders, and advance notice of fee changes. In 2026 alone, new or amended protections took effect in Colorado (simple online cancellation, Feb 16), Maine (separate opt-in to the renewal clause itself, Jan 1), Maryland (pre-conversion trial notice, Jun 1), Connecticut (annual reminders, online cancellation, voicemail cancellations honored within one business day, Jul 1), and Virginia (cancellation at least as easy as sign-up; notably, Virginia’s law expressly treats small businesses as consumers, so it covers B2B subscriptions). New York City’s own click-to-cancel rule — the first municipal one in the country — took effect October 1, 2026, with penalties starting at $525 per violation.
Do not treat any of this as a settled list. The state roster is moving quarter to quarter, and several of these laws apply to consumer transactions while your software purchases are business transactions — Virginia is the exception that proves you have to check your own state. The practical takeaway for a buyer: the law is a backstop, not a plan. Your plan is the checklist below.
The defense checklist
Do this for every paid subscription, on the day you sign up. It takes twenty minutes and it’s worth more than any law.
1. Calendar the renewal date and the notice deadline. Two calendar events, not one: the renewal date, and the non-renewal notice deadline (renewal date minus the window in your order form — 30, 60, or 90 days). Set the notice-deadline reminder two weeks early. This single habit defeats trap #3, the most expensive one.
2. Screenshot and save the signup terms. Save the checkout page, the order form, and the acknowledgment email — the price, the term length, the renewal clause, the notice window, the cancellation instructions. California now requires vendors to give you these in a retainable form; your job is to actually retain them. When the renewal quote disagrees with what you signed, the screenshot is the argument.
3. Test the cancellation flow before you need it. Within the first 30 days, walk the cancellation path as far as you can without completing it — or complete it and re-subscribe if the trial allows. If canceling requires a phone call during business hours, a chat with a “retention specialist,” or a form that doesn’t exist online, you now know what exiting will cost you in time and frustration. Price that into the decision to keep the tool. (This is the small-business version of the lock-in guide’s “export your data on day 30.”)
4. Calendar trial end dates separately. Every free trial gets its own calendar event three days before conversion, with the post-trial price in the event description. The trial-to-paid ambush only works on people who aren’t watching the date.
5. Read price-change notices the day they arrive. Vendors must give advance notice of fee changes in several states now. Treat every “updates to our pricing” email as a decision point, not spam: it’s your window to renegotiate, downgrade, or leave before the higher rate locks in.
6. Know your state’s baseline. Check whether your state has an auto-renewal law and what it requires — notice windows, consent standards, cancellation medium. If you’re in California, the protections are the strongest in the country; if you’re in Virginia, they may cover your business purchases directly; if you’re in New York City, the municipal rule adds another layer. Stamp the date on whatever you read — this area changes yearly.
What a vendor that isn’t trapping you looks like
Not every auto-renewal is a trap — auto-renewal is also how you avoid service interruptions. The difference is in the vendor’s behavior around the four traps above:
- Trial terms state the post-trial price and conversion date on the signup page, not three clicks deep.
- Renewal quotes arrive 30–60 days early and show last year’s price next to the new one.
- Cancellation is available in the same medium as signup — signed up online, cancel online.
- The notice window is stated in the order form in plain language, not defined by reference to a terms page that can change.
If a vendor fails all four, you’re not looking at a pricing page — you’re looking at a retention strategy. Our SaaS contract red-flags guide covers the clause-level version of this test.
Methodology
Enforcement figures are from primary FTC sources verified October 2026: the FTC’s case pages for Chegg (Matter C4782; complaint filed September 15, 2025; $7.5M) and Shutterstock (complaint and stipulated order filed May 13, 2026; $35M); the FTC’s December 2025 Instacart announcement ($60M consumer refunds), corroborated by contemporaneous Reuters and trade-press reporting of the filed complaint; and FTC statements on the Amazon Prime settlement (September 2025; $1B civil penalty + $1.5B redress) plus the FTC’s September 17, 2026 expanded-redress announcement. The click-to-cancel vacatur (8th Cir., July 8, 2025) and the March 11, 2026 ANPR with no announced replacement are from FTC announcements as reported by multiple law-firm analyses. California’s provisions are from the enrolled text of AB 2863 (amending Cal. Bus. & Prof. Code §17602, eff. July 1, 2025). State-law 2026 changes are from state legislative announcements and law-firm summaries, each stamped with its effective date — presented as a snapshot, not a settled roster. The ROSCA penalty figure ($53,088/violation) is the FTC’s 2025 inflation adjustment, confirmed as the current level given OMB’s April 2026 memorandum announcing no 2026 adjustment. No vendor contract language is quoted as current; clause types are described generically. This page is educational, not legal advice.
Sources
- FTC: Restore Online Shoppers’ Confidence Act (15 U.S.C. §§ 8401–8405) — ftc.gov, verified October 2026
- FTC case page: Chegg, Inc. (Matter C4782; $7.5M; complaint Sept 15, 2025) — ftc.gov, verified October 2026
- FTC press release: Instacart ($60M consumer refunds; Dec 2025) — ftc.gov; ftc.gov page returned an access error on fetch — announcement corroborated by Reuters and trade-press reporting of the filed complaint, October 2026
- FTC September 17, 2026 Amazon Prime expanded-redress announcement ($1B penalty + $1.5B redress; cap raised $51 → $200) — via USA Today, verified October 2026
- ROSCA civil penalty $53,088/violation (2025 adjustment; no 2026 adjustment per OMB M-26-11) — via JD Supra, verified October 2026
- FTC ANPR March 11, 2026; no replacement rule or timetable — via Mondaq and Kirkland & Ellis, verified October 2026
- AB 2863 enrolled text (amending Cal. Bus. & Prof. Code §17602; eff. July 1, 2025) — legiscan.com; Governor’s summary — gov.ca.gov, verified October 2026
- State 2026 changes: Colorado SB25-145 — cohousedems.com; Connecticut — norwichbulletin.com; Virginia amendments — JD Supra; New York (Nov 5, 2025) — Inside Privacy; NYC rule (eff. Oct 1, 2026; $525+ per violation) — Law Commentary, all verified October 2026
Frequently asked questions
I missed the 30-day notice window and got billed for another year. Can I fight it? Maybe — it depends on your state law, what the vendor disclosed at signup, and what your order form actually says. Some states give you cancellation rights the contract doesn’t mention, and some vendors will negotiate a partial term or downgrade rather than lose you entirely. What we can’t do is tell you whether your charge is lawful — that’s a question for your state’s consumer protection office or a lawyer, with your order form in hand.
Does ROSCA protect my business’s software purchases? ROSCA is a consumer-protection statute enforced by the FTC, and its cases have overwhelmingly involved consumer subscriptions. State auto-renewal laws are also mostly consumer-focused — Virginia’s 2026 amendments are a notable exception, expressly extending coverage to small businesses. Don’t assume consumer protections cover your B2B contracts; check your state.
The vendor raised the renewal price and says it’s in the contract. Is there anything I can do? First, verify the claim against the order form you signed — screenshot archives matter here. If the increase exceeds a stated cap, that’s a contract question. If there’s no cap, your leverage is commercial, not legal: get a competing quote, ask for the prior rate as a retention offer, or time your exit to the next notice window. Several states now require advance notice of fee changes, which is your decision window — use it.
I signed up before California’s amended law took effect. Does it apply to me? AB 2863 applies to contracts entered into, amended, or extended on or after July 1, 2025. Renewals and amendments after that date can bring an older contract under the new requirements — but whether a specific renewal counts is fact-specific. The checklist in this guide works regardless of which version of the law covers you.
Should I just dispute the charge with my credit card company? A chargeback can reverse a single billing, but it doesn’t cancel the contract — and vendors routinely respond by suspending the account, sending the balance to collections, or both. Treat the chargeback as a last resort for a charge you genuinely didn’t authorize, not as a cancellation method. Cancel first, through the vendor’s process, then dispute if they keep billing.