EU Digital Services Act Enforcement in 2026: What the €550 Million AliExpress Fine Means for Every Online Shopper

I still remember the cheap phone charger I ordered years ago that arrived smelling of burnt plastic, and I threw it away the same day because I did not trust it near my family. I have followed EU tech regulation ever since, and I read the enforcement decisions as soon as they land, so I can explain them in plain words. If you shop on big marketplaces, you face the same quiet fear I did: you cannot tell a safe product from a dangerous copy just by looking at a photo. I promise you this article will explain exactly what the EU did in 2026, why the fines grew so large, and what it changes for you the next time you click buy. This guide is for everyday shoppers, small sellers, and anyone who uses a large platform in Europe, and we will start with the fine that changed the conversation.

I have checked every fine, date, and platform name in this article against the sources linked in the text itself. Where a detail comes from only one secondary report, I say so, and I do not guess at figures the sources do not give.

Contents: what you will learn

• Why the EU fined AliExpress €550 million, and why that fine is the largest yet
• How the Temu and X fines fit the same pattern
• What changed when ChatGPT, Reddit, and Roblox joined the strictest tier
• What shoppers and small sellers should actually do now
• What to watch before the next enforcement deadline

1. The fine that changed the conversation

I first understood the scale of this story when I read that the European Commission fined AliExpress €550 million on 20 July 2026 for failing to crack down on unsafe and counterfeit products. That was not a warning letter or a polite request for improvement. It was, by the reporting I found, the biggest fine ever imposed under the Digital Services Act, and it landed only weeks after a similar fine against Temu. I want you to hold that timing in mind, because it tells you the Commission is no longer testing whether it can use this law. It is using it, repeatedly, against the biggest marketplaces first. The Commission said the problem was not one bad seller or one bad week. It said AliExpress had failed to assess and mitigate the systemic risk that illegal, unsafe, and counterfeit products would reach shoppers through its marketplace, and that is a very different charge from blaming a platform for a single listing.

When I read the detail, one line stayed with me. EU tech chief Henna Virkkunen said, in the statement quoted by the Associated Press report, that the spread of counterfeit clothing, unsafe toys, dangerous cosmetics, and other illegal products is not an unavoidable cost of shopping online. She called it a failure to comply with the DSA, and she added that scale is not an excuse and risks must be identified and addressed systematically. I agree with that framing, and I think it matters for you because it shifts the question you should ask as a shopper. You should not only ask whether a seller looks honest. You should ask whether the marketplace itself has a working system for catching the dishonest ones before they reach you. AliExpress, for its part, said it disagreed with what it called a disproportionate fine, said it had invested substantial resources in risk assessment and consumer protection, and said it was reviewing its options. I report that response fairly because a fair article must show both sides, even when the regulator’s case looks strong.

2. What AliExpress actually got wrong, in plain words

I find the legal language around the DSA hard to follow, so let me translate the findings into everyday terms. According to Digital Watch Observatory’s summary of the decision, the Commission found that AliExpress underestimated the risks of its own service and did not put effective safeguards in place. Its content moderation systems were not assessed well enough, and it did not allocate enough human reviewers to check illegal products. Its recommender and advertising systems kept promoting illegal products before those products were removed, which means the platform’s own machinery was pushing the very goods it was supposed to catch. Traders also bypassed checks by miscategorising products, and counterfeit goods, unsafe toys, and dangerous cosmetics stayed available for extended periods. I think that last point is the one ordinary shoppers feel most directly, because a product that stays up for weeks looks legitimate simply because it has stayed up for weeks.

There is another finding I want you to notice, because it explains why fines alone do not fix the problem overnight. The same summary reports that AliExpress did not consistently sanction sellers of illegal products, and its brand authorisation system did not effectively prevent counterfeit listings. A separate analysis I read added that stores selling illegal products were able to remain active despite being penalised, and that the mandatory brand authorisation system proved ineffective and understaffed. I am careful here: that detail about staffing comes from a secondary analysis, not from the Commission’s own text as I was able to verify it, so treat it as reported analysis rather than a direct quote. Still, the pattern is clear, and it matches what I have seen as a shopper. If a penalised store can simply carry on, or reopen under a new name, then punishment without follow-through is just theatre. The Commission gave AliExpress until 20 October 2026 to submit an action plan, and that deadline is the real test. A fine looks backwards at what went wrong, but an action plan must show, in concrete steps, what will change next.

3. Temu, X, and the pattern you should not miss

I do not want you to think AliExpress was singled out, because the record shows a sequence. A comparison of the DSA fines lists X first, fined €120 million on 5 December 2025 over a deceptive blue checkmark, a deficient advertising repository, and blocked researcher data access. Temu followed on 28 May 2026 with a €200 million fine for failing to assess the risk of illegal products reaching EU consumers. AliExpress then followed on 20 July 2026 with €550 million for failing to assess and mitigate risks from illegal, unsafe, and counterfeit goods. I lay those three dates out because they tell a story of escalation. The first fine tested transparency rules. The next two tested the deeper duty to assess and reduce systemic risk, and the penalties grew as the duty grew more serious. That is not a coincidence, and it is not just about the size of each company. It is about the kind of obligation that was breached.

For you as a reader, the practical lesson is simple. The DSA does not treat a marketplace as a neutral noticeboard that can wash its hands once a seller uploads a listing. Once a service is large enough to be designated as a very large online platform, it must actively study the risks its own design creates, including how its recommendations and advertising push products, and it must show evidence that its fixes actually work. I know that sounds abstract, so here is a concrete way to use it. When you shop, look for whether a marketplace explains how it checks sellers, how it handles reports of illegal products, and how quickly it acts. A marketplace that hides that information is telling you something, even if it never says a word. And if you sell through a marketplace, keep your own records of product safety, brand authorisation, and supplier details, because the platform’s duty does not remove your responsibility for what you list.

4. Why ChatGPT, Reddit, and Roblox changed the story again

I was surprised, like many readers, when the Commission moved beyond shopping and social feeds and into AI chat. On 31 August 2026, the European Commission designated ChatGPT as a Very Large Online Search Engine and Reddit and Roblox as Very Large Online Platforms under the DSA. Each service had declared at least 45 million average monthly users in the EU, which is the threshold for the strictest tier. The Commission called ChatGPT a hybrid service, because it is an AI system that can also search the web in response to your prompts, so it qualifies as an online search engine under the law. I think that reasoning matters far beyond one product. It says the law follows what a service actually does, not what its marketing calls it, and that principle will shape how every AI tool with web search is treated in Europe.

The three services then had four months, meaning until January 2027, to comply with the extra duties for very large services. Those duties include assessing and mitigating systemic risks linked to illegal content, negative effects on minors, physical and mental well-being, fundamental rights, electoral processes, and public security. They also include independent audits, a compliance function, transparency about advertising, and an option for recommendations that is not based on profiling. I want to be honest about what this does and does not mean for you. It does not mean the Commission has certified that ChatGPT’s answers are accurate or neutral. It means the service must now study its own risks, open its systems to scrutiny, and show its working. If you use AI search daily, that is good news, but it is slow news. The real evidence will come in the risk assessments and audits that follow, not in the designation announcement itself, and I will be watching for those documents rather than celebrating a label.

5. What you should do differently from today

I will keep this section practical, because regulation only helps you if it changes a decision you make. First, check the seller, not just the price. A deal that is far cheaper than every other listing for the same branded product deserves a second look, especially for toys, cosmetics, electronics, and chargers. Second, use the marketplace’s own report button when you spot a suspicious listing, and keep a screenshot of the listing and your order, because your report is part of the evidence the system is supposed to act on. Third, if a product arrives damaged, mislabelled, or unsafe, stop using it and report it through the marketplace and, where relevant, your national consumer authority, rather than quietly throwing it away as I once did. Fourth, if you run a small shop on a marketplace, treat product safety documents and brand permissions as part of your stock, not as paperwork you will sort out later. The platforms are now being judged on whether their checks work, and sellers who cannot show their paperwork will be the first to feel that pressure.

I also want to warn you against a comforting mistake. A big fine does not mean the problem is solved, and a clean-looking storefront does not mean a product is safe. Enforcement in 2026 has shown that the Commission can punish failures, but it has not yet shown, in public evidence I could verify, that every marketplace has fixed the underlying systems. The AliExpress action plan deadline of 20 October 2026, and the January 2027 compliance deadline for ChatGPT, Reddit, and Roblox, are the next moments when promises must turn into proof. I will judge those moments by the documents, not by the press releases. You can do the same by asking one question whenever a company claims it has fixed a problem: where is the evidence, and who checked it?

Frequently asked questions

What is the Digital Services Act in simple terms?

The DSA is the EU law that sets duties for online intermediaries, with the strictest duties for very large platforms and search engines that reach at least 45 million monthly users in the EU. Those services must assess systemic risks, mitigate them, and accept audits and scrutiny.

Why was AliExpress fined €550 million?

According to the Commission’s decision as reported, AliExpress failed to adequately assess and mitigate the systemic risks of illegal, unsafe, and counterfeit products on its marketplace, including unsafe toys and dangerous cosmetics, and it did not consistently sanction sellers of illegal products.

Was Temu fined for the same reason?

Temu was fined €200 million on 28 May 2026 for failing to assess the risk of illegal products reaching EU consumers. The theme is similar, but each decision turns on that platform’s own risk assessment and mitigation measures.

Why was X fined if it is not a shop?

X was fined €120 million on 5 December 2025 over transparency failures, including a deceptive blue checkmark, a deficient advertising repository, and blocked researcher data access. The DSA covers transparency and systemic risk, not only shopping.

Does the ChatGPT designation mean AI answers are now certified as true?

No. The designation means ChatGPT, as a very large online search engine, must meet stricter duties on risk assessment, audits, and transparency. It is a regulatory classification, not a guarantee of accuracy.

What should I do if I receive an unsafe product?

Stop using it, keep the packaging and order details, report the listing through the marketplace, and contact your national consumer authority if the product poses a safety risk. Keep screenshots, because they help investigators act.

Final thoughts

I started this article with a charger I threw away, and I end it with a lesson I wish I had learned sooner. You should not have to become a product-safety expert just to shop online, and the EU’s 2026 enforcement says the biggest platforms should carry more of that burden themselves. The fines are large, the deadlines are real, and the direction is clear, but the proof will come in the action plans and audits that follow. Well done for reading to the end, because understanding how these rules work is the first step to using them. Tell me in the comments: have you ever received a product you did not trust, and what did the marketplace do when you reported it? I read every comment, and your experience helps other readers shop more safely.

Published: 25 October 2026 | Updated: 25 October 2026