TrendNovember 2026 · 7 min read

EU Withdrawal Button and NYC Click-to-Cancel: What Subscription Merchants Must Change in 2026

Two consumer-protection changes land on subscription and online merchants in 2026. In the EU, buyers must be able to exercise their 14-day right of withdrawal through a clear online "withdrawal function" that is as easy to use as the checkout itself. In New York City, from 1 October 2026, subscription businesses must let consumers cancel as easily as they signed up, on top of New York State's existing automatic renewal law - retention offers are still allowed, but they can't block the cancellation. Merchant-of-record platforms such as Paddle are already changing their cancellation flows. If you bill customers yourself through Stripe, Shopify, Adyen or another processor, the work is yours - and how you handle it shows up directly in your "cancelled recurring" and "credit not processed" chargebacks.

Key facts

→EU: an online withdrawal function for distance contracts, in addition to the existing 14-day withdrawal right
→New York City: cancellation must be as easy as sign-up from 1 October 2026; penalties apply per violation
→Retention offers are still allowed in New York, but the customer must always be able to finish cancelling
→Hard-to-cancel subscriptions are a leading cause of Visa 13.2, Mastercard 4853 and Amex C28 chargebacks
→Timestamped cancellation and withdrawal records are strong dispute evidence - for you or against you

What Changed in the EU: the Online Withdrawal Function

EU consumers have long had 14 days to withdraw from most online purchases without giving a reason. What is new is how they must be able to do it. Under the amended Consumer Rights Directive (introduced by Directive (EU) 2023/2673 and applying from 19 June 2026), traders selling through an online interface must offer a clearly labelled withdrawal function - a button or link such as "withdraw from contract here" - that stays available for the whole withdrawal period.

In practice the flow has three parts:

→A prominent, clearly labelled entry point on the same interface the customer used to buy
→A short form where the customer identifies themselves and the contract, followed by a confirmation step
→An acknowledgement of receipt sent to the customer on a durable medium (such as email), including the date and time of the withdrawal

The underlying refund rules have not changed: once a customer withdraws, you generally have 14 days to refund the payment, including standard delivery costs for goods. What has changed is that the request is now easy to make and automatically timestamped - so a missed refund is easy to prove.

Paddle, for example, now lets eligible EU buyers request a withdrawal online with a confirmation step through its customer portal (Paddle Billing) and Paddle.net (Paddle Classic).

What Changed in New York: Click-to-Cancel

From 1 October 2026, New York City requires subscription businesses to let consumers cancel as easily as they signed up. This sits on top of New York State's automatic renewal law (General Business Law §527-a), which already required clear renewal terms and an easy way to cancel - including online cancellation for subscriptions sold online.

The key points for merchants:

→If someone can subscribe online in a few clicks, they must be able to cancel online with comparable effort - no mandatory phone calls, chats or emails
→Retention offers (discounts, pauses, downgrades) are still allowed, but they cannot stand in the way: the customer must always be able to complete the cancellation
→Penalties apply per violation, so a non-compliant flow can multiply into significant exposure across a subscriber base

Paddle's implementation is a useful reference: subscribers with a New York address see a cancel option at every step of the cancellation flow. They can still be shown retention offers, but they can always cancel in one click.

Dealing with this type of dispute right now?

ChargeMate generates a compliant dispute response in 3 minutes - tailored to the exact reason code.

Try free - 3 responses →

Who This Applies To

The EU withdrawal function applies to traders who sell to EU consumers through a website or app, wherever the trader is based. B2B sales are generally outside consumer withdrawal rules, and some purchases - such as digital content the customer explicitly agreed to start receiving immediately - can lose the withdrawal right, but the exceptions are narrow and must be disclosed correctly at checkout.

The New York rules apply to businesses selling subscriptions or automatically renewing contracts to consumers in New York, again regardless of where the business is located.

If you sell through a merchant of record such as Paddle, the platform is the legal seller and is handling these flows for you. If you are the merchant of record yourself - billing through Stripe, Shopify, Adyen, Braintree, Chargebee or your own system - you need to build or configure the cancellation and withdrawal flows yourself. Check what your billing provider offers out of the box before building from scratch.

Why This Matters for Chargebacks

When customers cannot find a way to cancel, they go to their bank. The resulting disputes usually land under a small group of reason codes:

→Visa 13.2 - Cancelled Recurring Transaction
→Mastercard 4853 - Cardholder Dispute (which covers cancelled recurring billing)
→Amex C28 - Cancelled Recurring Billing
→Visa 13.6 - Credit Not Processed, when a customer cancelled or withdrew and the refund never arrived

The new rules cut both ways. An easy, logged cancellation path removes one of the main reasons customers dispute in the first place: they can stop the subscription in a minute instead of calling their bank. It also gives you evidence. If a cardholder claims they cancelled but your system shows no cancellation or withdrawal request, a timestamped audit log of your cancellation flow - plus proof it was visible and easy to use - is much stronger than "we have a cancellation policy in our terms".

The flip side: if the customer did use your withdrawal function or cancel button and you kept charging or never refunded, the confirmation email you were required to send is exactly the evidence the issuer will side with. These disputes are very hard to win, and they also count towards your dispute ratio under Visa VAMP and Mastercard's monitoring programs.

What to Do Now: a Checklist

Most of the work is product and billing configuration, not legal drafting.

→Map your current cancellation flow: count the clicks from login to "cancelled" and compare it with sign-up. Remove any step that requires contacting support
→Add a clearly labelled withdrawal entry point for EU customers that is reachable for the full 14-day period, with a confirmation step and an automatic acknowledgement email showing date and time
→Keep retention offers, but make "No thanks, cancel" available on every screen
→Stop billing immediately on cancellation, and trigger refunds for EU withdrawals automatically within 14 days
→Log every cancellation, withdrawal and refund event with timestamps, and keep the confirmation emails - you will need them for dispute evidence
→Send pre-renewal reminders for annual plans and after free trials; surprise renewals are the classic source of 13.2 disputes
→Review your descriptor so customers recognise the charge on their statement and don't dispute it as unknown

When a cancellation dispute still arrives, respond with the timeline: sign-up and consent to renewal terms, the reminders you sent, your cancellation flow and its logs showing no request before the disputed charge, and usage after the renewal date if you have it.

Frequently Asked Questions

What is the EU withdrawal function?▾

It is an online button or link that lets EU consumers exercise their 14-day right of withdrawal as easily as they bought. It must be clearly labelled, available for the whole withdrawal period, include a confirmation step, and trigger an acknowledgement of receipt with the date and time.

When does New York City's click-to-cancel rule apply?▾

From 1 October 2026. Subscription businesses must let New York consumers cancel as easily as they signed up. Retention offers are still allowed, but they cannot block the cancellation, and penalties apply per violation.

Do these rules apply to merchants outside the EU or New York?▾

Yes, if you sell to consumers there. The EU rules follow the consumer, not the trader's location, and the New York rules cover businesses selling subscriptions to New York consumers.

I sell through Paddle. Do I need to do anything?▾

Paddle acts as merchant of record, so it is updating its own cancellation and withdrawal flows for eligible buyers. You should still review how your retention offers are configured and make sure your product does not send customers elsewhere to cancel.

How do cancellation rules affect chargebacks?▾

Hard-to-cancel subscriptions drive Visa 13.2, Mastercard 4853 and Amex C28 disputes. An easy, logged cancellation flow reduces those disputes and gives you strong evidence when a customer claims they cancelled but did not. If the customer did cancel and you kept charging, the required confirmation email makes the dispute very hard to win.

ChargeMate