Fake reviews and drip pricing are banned practices in the UK, and the consumer authority can fine directly, so e-commerce compliance teams use AI agents to screen reviews, test checkouts, check age-restricted sales and review cookie consent. Compliance and legal keep every takedown and remediation. Consumer law, UK GDPR, electronic marketing rules and product safety law apply.
What does e-commerce compliance involve in the UK?
Consumer law enforcement has sharpened. The UK competition and consumer authority has power to decide consumer law breaches and impose fines itself, without going to court first. Practices that were once low risk, such as loosely moderated reviews or fees added at checkout, carry real exposure. Compliance teams are re-examining whole journeys.
Reviews are a specific focus. Fake reviews, and concealing incentivised reviews, are banned practices, and businesses that host reviews are expected to take reasonable steps to prevent and remove fakes. Drip pricing, where mandatory charges are revealed late, is also treated as unfair.
Data and age complete the picture. Cookies and electronic marketing need consent under UK rules, with the ICO enforcing. Age-restricted products, from alcohol to knives, need checks at sale and delivery. Product safety, distance selling cancellation rights and returns handling fill the rest.
Where can agents help?
- Review screening (depth 2). The agent analyses incoming reviews for signs of fakes, such as bursts from new accounts, near-identical wording and links to incentive schemes, and drafts hold or removal recommendations for a moderator.
- Drip pricing tests (depth 1). The agent walks every checkout journey and compares the first price shown with the final price, flagging mandatory charges that appear late.
- Age-restricted sale checks (depth 1). The agent tests that age-restricted products trigger verification at order and that delivery instructions require checks at handover.
- Cookie and consent tests (depth 1). The agent records which trackers fire before consent and after refusal, and checks marketing lists against consent and unsubscribe records.
- Complaint pattern analysis (depth 2). The agent groups complaints by product, issue and journey, and drafts a monthly summary that highlights possible unfair practices.
Review screening is the use most changed by the new regime. A retailer that hosts reviews needs evidence that it takes reasonable steps against fakes. An agent that screens every review, with moderators deciding on the flags, produces that evidence as a by-product.
Drip pricing tests are the quickest to act on. The test is mechanical, the fix sits with the product team, and before-and-after evidence is easy to keep. Run them after every checkout change, not once a year.
What stays with people?
Removing reviews, suspending sellers and changing pricing practices stay with named staff. Each has commercial and legal consequences, and wrong removals of genuine reviews can mislead customers in their own way.
Responses to the competition and consumer authority, the ICO or trading standards stay with legal and compliance. So does any decision on customer redress after a finding.
Age-verification failures go to a person straight away, because they may involve sales to children of dangerous or restricted goods. This is the line drawn in AI compliance agents: second line, never the last word.
Which UK rules apply?
The UK takes a principles-based, regulator-led approach to AI rather than a single AI law. UK consumer law prohibits unfair commercial practices, including fake reviews and drip pricing, gives consumers cancellation rights for distance sales and remedies for faulty goods, and lets the competition and consumer authority enforce directly with fines. Trading standards enforce locally. Product safety law and age-restricted sales laws apply.
UK GDPR and the Data Protection Act 2018 govern customers' personal data, and separate UK rules govern cookies and electronic marketing; the ICO enforces both. Card payments bring PCI DSS v4.0. Our overview of how AI agents are regulated in the United Kingdom covers the regulators and their approach to AI.
When customers send their own AI agents to compare and buy, consumer law still applies to what those agents are shown. A drip-priced checkout misleads an agent and its owner alike. Our explainer on what agentic commerce is covers the change.
This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.
How should you start in the first 90 days?
Month one: run drip pricing tests across all checkout journeys and fix any late mandatory charge. Keep before-and-after evidence.
Month two: run review screening at depth 1 over the last six months of reviews to establish a baseline, then start screening new reviews at depth 2 with moderators deciding.
Month three: add age-restricted sale checks and cookie tests. Report results to the board's risk committee with the actions taken.
Where Pryme fits
Pryme lets review screening draft removal recommendations as held verdicts for a named moderator, with each decision filed. Attest certifies the screening capability on the retailer's own past reviews, including known fakes. Certificates lapse after 90 days, so screening is re-proven as review fraud patterns shift.
Questions people ask
Can an AI agent remove fake reviews automatically?
It can, but automatic removal risks deleting genuine reviews, which can itself mislead customers. Hold removals for a moderator except for clear cases.
Does the Consumer Duty apply to online retailers?
No. The Consumer Duty applies to FCA-regulated firms. Retailers fall under general consumer law, unless they also offer regulated products such as credit.
How does the UK compare with the US for e-commerce compliance?
The US relies on federal consumer protection rules and a patchwork of state laws. See our brief on compliance agents in US e-commerce.