Subscription-Trap & Free-Trial Scams: 5 Variants and the ROSCA Defense

A "free trial" requires credit-card details up front, then auto-converts to recurring billing — typically $9.99-$229.99 per month — at the end of the trial period. Cancellation flow is built to be missed or fail. Per the FTC's free-trial guidance, ROSCA requires clear-and-conspicuous disclosure of all material terms (including the auto-renewal price and date) before billing information is collected.

A representative case from r/Scams + FTC complaints: a consumer signs up for a "7-day free trial of Speechify Premium" via a Facebook ad, enters her credit-card details, and receives the trial. She intends to cancel before day 7 but loses track of the date. On day 8, her card is charged $229.99 for the annual subscription. She finds the cancellation page in her account, which offers monthly cancellation but tells her the annual charge has already been processed and is non-refundable — even with proof that she canceled within an hour of the charge posting. The 8-upvote r/Scams thread "Speechify 'free trial' charged me $229.99 after cancellation, no refund, even with proof" documents the script's tempo. The FTC's Instacart settlement specifically targeted similar Instacart+ free-to-paid auto-enrollments without clear disclosure.

The variant is structurally durable because the trial period is timed to be just long enough to make the consumer forget — 7-30 days is the canonical range — and the cancellation flow is buried in account settings rather than placed alongside the signup flow. ROSCA's clear-and-conspicuous-disclosure requirement and the FTC's vacated-but-replacement-pending Click-to-Cancel Rule both target this exact pattern; the 2025 settlements with Amazon, Instacart, and Chegg were all built on this mechanic. Despite the federal architecture, the variant persists because compliance is uneven and the per-consumer cost is low enough that most victims do not pursue it past one chargeback attempt.

What stops it is the virtual-card + calendar-reminder combination. Use a Capital One Eno, Citi Virtual Account Number, BofA ShopSafe, Apple Card, or Privacy.com virtual card number for any free trial. Lock or delete the virtual number 48 hours before trial-end. Set a calendar reminder for the same date. If the company's cancellation flow fails, the lock prevents the charge from going through; if the cancellation flow works, you have a clean exit either way. Report any non-compliant trial at reportfraud.ftc.gov.

A user searches for a one-time tool — PDF conversion, image compression, AI image generation, file format conversion — clicks a top-result website, pays a small fee ($1-$5) thinking it's a one-time charge, and is instead enrolled in a recurring subscription at $9.99-$39.99/month. The site's terms-of-service include the subscription clause but it's not clearly displayed at checkout. ROSCA's clear-and-conspicuous-disclosure requirement is structurally violated.

A representative case from the 30-upvote r/Scams "AppNebula" thread: a user clicks a Facebook ad for "personality test results — see your insights." The site charges $1 for the test, results are delivered, and the user moves on. Three weeks later a $39.99 charge appears on the credit card; the site terms include enrollment in a "premium personality coaching subscription" at $39.99/month with cancellation only via account settings (which require account creation the user never completed). The card-issuer dispute under FCBA succeeds, but the same pattern appears under different brand names (BestPDF, PDFPaw, Verniershop, MyIQ, Breeze Wellbeing) across hundreds of r/Scams threads.

The variant is particularly common in the PDF / image-conversion / personality-quiz / AI-tool space because the searches that lead to these sites are high-intent and the consumer is in "I just need this one thing" mode rather than "let me read the ToS" mode. The subscription clause is technically disclosed (often in a 9pt grey footer or behind a small "Terms" link) but not clearly and conspicuously per ROSCA. State AGs in California and New York have pursued similar cases, and the FTC's 2025-2026 ROSCA enforcement extends to this category.

What stops it is the same virtual-card defense plus a structural awareness that "free / cheap PDF tools" online are frequently subscription traps. Use a virtual card for any one-off online tool purchase. If the site requires card details for a $1 charge, the $1 is the bait — the recurring billing is the trap. For genuinely one-time PDF / image needs, free open-source tools (LibreOffice, Preview on macOS, ILoveIMG, SmallPDF's free tier with no card required) cover most use cases without subscription risk. Adobe Acrobat's per-document pricing and Microsoft 365 are legitimate paid alternatives if the use case is recurring.

A pre-checked subscription box at checkout auto-enrolls customers in a recurring subscription if they don't manually uncheck it. The mechanic was the foundation of the FTC's $2.5B Amazon Prime settlement ($1B civil penalty + $1.5B refunds) and the $60M Instacart+ settlement. ROSCA explicitly prohibits negative-option enrollment without affirmative consent; pre-checked boxes do not satisfy the affirmative-consent requirement.

The Amazon case from the FTC's complaint: customers checking out at amazon.com encountered a "Continue with Prime" button alongside a smaller "No, thanks, I don't want fast, free shipping" link, with the Prime option visually emphasized. Customers who clicked the prominent button were enrolled in a $14.99/month or $139/year Prime subscription; many believed they were just continuing checkout. The FTC alleged the design was a "dark pattern" designed to maximize accidental enrollment. Amazon agreed to $1.5B in consumer refunds distributed to affected customers via the FTC's claim portal, plus a $1B civil penalty.

The Instacart case targeted a similar pattern in Instacart+ free-trial signup: customers checking out for grocery delivery were enrolled in a 14-day Instacart+ free trial, with the trial-to-paid auto-renewal not clearly disclosed. The $60M settlement (December 2025) included consumer refunds. The Walmart+ / Paramount+ pattern documented in the 33-upvote r/Scams thread "Scam regarding Walmart+ Paramount+ acc" follows the same structural pattern with a different bundled-product set.

What stops it is checkout vigilance. Read every checkbox at checkout. Uncheck anything you did not affirmatively choose. The protective rule is structurally simple but requires conscious attention at the moment of checkout — which is exactly when most consumers are in autopilot mode. For high-volume online retailers (Amazon, Walmart, Instacart, Target), check your subscription page after any large purchase to confirm no unintended enrollments. If you find one, dispute via FCBA, file at FTC + CFPB, and check the FTC's claim-portal page to see if the company is currently subject to a refund settlement (Amazon, Instacart, Chegg all are).

The cancellation flow is structured to be substantially harder than the enrollment flow. Uber One: 23 screens, 32 actions to cancel per FTC complaint. Fitness International (LA Fitness): certified mail or in-person visit during limited weekday hours per FTC complaint. ROSCA's simple-cancellation requirement is structurally violated; FTC enforcement under ROSCA is the active backstop. The vacated Click-to-Cancel Rule would have made this explicit; FTC's January 2026 ANPRM is the current path to revival.

The Uber One case from the FTC's 2025 complaint: customers attempting to cancel Uber One through the Uber app were forced to navigate up to 23 screens with as many as 32 separate actions required, including multiple "Are you sure?" confirmations, retention-discount offers, and surveys about why they wanted to cancel. The FTC alleged the design was a deliberate dark pattern intended to exhaust consumers into giving up and accepting another month's billing. The case is ongoing as of mid-2026; Uber has indicated it will challenge.

The Fitness International (LA Fitness) case covered the in-person variant: gym members could enroll easily online or in person but could only cancel by either (1) visiting a gym in person during limited weekday hours or (2) mailing a written cancellation form by certified mail. State AGs in California, New York, Massachusetts, and Illinois have pursued similar gym-cancellation cases; many states now require gyms to offer online cancellation by statute. Despite the legal architecture, individual gyms continue to use cancellation labyrinths because the marginal cost of forcing one extra month of billing per departing member is high in aggregate.

What stops it is the same payment-side defense plus the FCBA chargeback. If a company's stated cancellation flow is unreasonably burdensome — multi-screen, certified-mail, retention-discount loops — send a written cancellation by email and certified mail citing ROSCA's simple-cancellation requirement, then dispute the charge with your card issuer under FCBA. Most issuers will block the merchant from billing further once the dispute is filed. Report the cancellation difficulty at FTC + CFPB + state AG. The FTC's active ROSCA enforcement (Uber, Fitness International, Chegg, Amazon, Instacart) means aggregated complaints contribute directly to enforcement actions.

A free-to-download mobile app prompts the user to subscribe to "premium" features at $9-$15 per week, framing the cost as small. The weekly framing compounds to $468-$780 per year — substantially more than competing monthly-billed services would charge. Weekly-billing is a deliberate UX pattern that exploits the difference between weekly-numerator perception and annual-denominator reality.

A representative case from the 30-upvote r/Scams "Breeze Wellbeing" thread: a user downloads a free wellness app, encounters a $9.99/week "Premium" prompt on first launch, and signs up assuming they'll cancel before the next week. The cancellation requires going through the App Store / Google Play subscription settings (not the app itself), which most users don't realize. Three months later they discover $129.87 in cumulative weekly charges. The annualized cost is $519, more than competing monthly-billed wellness apps charge ($60-$120/year) for similar feature sets. The FTC's 2025 ANPRM submission on negative-option marketing specifically called out weekly-billing patterns as an emerging concern.

The variant is structurally durable because mobile-app-store subscription mechanics make cancellation friction higher than for direct web subscriptions — users have to navigate to App Store settings or Google Play settings rather than canceling within the app, and many users do not know this is possible. Apple and Google both maintain easy in-platform cancellation flows, but the discovery path is non-obvious. App-store policies require disclosure of subscription terms, but enforcement is uneven.

What stops it is annual-cost reframing plus app-store cancellation literacy. Convert any weekly subscription price to annual ($9/week = $468/year, $14/week = $728/year) before signing up. If the annualized cost would be obviously high for the value, skip. If you're already enrolled, cancel through your iOS Settings (Settings → Apple ID → Subscriptions) or Google Play account (Subscriptions menu) rather than through the app itself. Report deceptive weekly-billing apps at reportfraud.ftc.gov and to the relevant app store's report-app-issue flow.