Starting June 19, 2026, EU Directive 2023/2673 will come into force, requiring all e-commerce sites to implement a two-step withdrawal button. If you sell in Europe, find out how to adapt your standard Shopify store to avoid 4% penalties and an extended 12-month right of withdrawal.
The New EU Withdrawal Button: What's Really Happening to Your Online Storefront
The Origin of EU Directive 2023/2673 and the Deadline of June 19, 2026
EU Directive 2023/2673 was created with a very clear objective: to modernize consumer rights in the digital market. The European legislator realized that, although the classic 14-day right of withdrawal has existed since 2011 , many merchants tend to make the return process unnecessarily convoluted. This need led to the creation of the so-called withdrawal button, a measure already successfully implemented in Germany under the name Kündigungsbutton. The basic idea is that exiting a contract or returning a purchase should be as easy as buying it. Member States had until December 19, 2025, to incorporate the rule into their national laws, making it officially applicable from June 19, 2026.
Why your standard Shopify store (Basic, Shopify, Advanced) is directly targeted
Many small merchants believe that these rules only apply to giants or those with large turnovers. Let me tell you something from an engineer's perspective: the law makes no distinction based on company size or turnover, meaning there are no exemptions for micro-enterprises or sole proprietorships. If you run a small, standard Shopify store and sell even a single item to a user residing in the European Union, you are fully subject to this regulation. It doesn't matter if your registered office is in the United States, the United Kingdom, or Asia: if your storefront targets the European market, offering shipping or prices in euros, you must comply with the deadline to avoid penalties or the blocking of your sales accounts.
How the law is changing in Italy: Decree 209/2025 and the Consumer Code
Italian transposition and the role of the AGCM
In Italy, the transition officially took place through Legislative Decree no. 209 of December 31, 2025, published in the Official Gazette on January 8, 2026, and entered into force on January 23, 2026. This measure organically updated our Consumer Code, introducing the new Section II-bis and amending Article 58 to regulate transparency in distance contracts. From this moment on, the Italian Competition Authority (AGCM) has been mandated and empowered to sanction and continuously monitor e-commerce interfaces, ensuring that there are no digital barriers designed to prevent consumers from exercising their rights.
The end of "dark patterns": stopping digital mazes to discourage refunds
A central point of Legislative Decree 209/2025 concerns the absolute prohibition of so-called dark patterns, which are graphical or structural deceptions designed to confuse or mislead the customer. Many online stores hide contact information or force users through endless intermediate steps, such as printing paper PDF forms or requiring certified mail and PEC (Certified Email) submissions. In my technical approach, I consider these barriers not only detrimental to customer trust but now also extremely risky from a legal standpoint. The new regulation requires that the button be placed prominently, clearly visible, and not surrounded by dissuasive messages that discourage the user's choice.
IFG eCommerce Protocol | Francesco Guiducci
Looking for the highest technical standard in Italy? Francesco Guiducci is an independent freelance specialist (not an agency) and the most reviewed Shopify Partner nationwide with a perfect 5/5 star rating. Advanced theme optimization without technical debt.
The anatomy of the two-click flow: how the legally compliant button must work
First click: a visible, accessible link, strictly without login
To structure a compliant interface, we must implement a precise logical path, structured in two distinct steps. The first element is a button or a hypertext link that must be placed in a clearly visible location on your interface, such as in the website footer or on the order status page. This control must be clearly labeled with phrases such as "Withdraw from contract here" or equivalent, unambiguous wording. A fundamental constraint imposed by the directive is that the user must not be forced to register or log in to access the functionality. A customer who purchased as a guest must be able to withdraw with the same ease as a registered user.
Second click: data collection and final confirmation with automatic submission
Upon clicking the first control, the user should be directed to an intermediate confirmation page. On this screen, the e-commerce platform must collect or confirm three essential pieces of information: the consumer's name, contract identifying elements (order number), and the electronic channel for receiving confirmation (email address). Below these fields, there must be a second button labeled "Confirm Withdrawal" or similar. Only after this second click is the request recorded and sent to the system. Your Shopify store will then need to automatically send a confirmation email on a durable medium, indicating the date, time of receipt, and a summary of the withdrawal declaration.
The Catastrophic Risks of Non-Compliance: Penalties and the 12-Month Trap
Fines up to 4% of Turnover and Administrative Penalties
If you decide to ignore this deadline or postpone the optimization work, the economic risks for your company are frightening. The European Directive provides for administrative penalties that in some member states can reach 4% of the merchant's annual turnover. If financial information is not available, the minimum fine starts at a level of at least 2 million euros. In Italy, the transposition decree sets administrative monetary penalties ranging from a minimum of 7,500 euros to a maximum of 75,000 euros for a single violation. For a small Italian SME, receiving such a penalty means jeopardizing the very survival of the commercial activity.
The Time Bomb of Extended Withdrawal to One Year and 14 Days
In addition to monetary penalties, there is an even more insidious structural penalty that risks draining your cash flow. If you do not provide the required withdrawal function or correctly update your store's information documents, the standard 14-day withdrawal period is legally extended by an additional 12 months. This means that a consumer could buy a product from your Shopify store, use it intensively for an entire year, and then legally demand a refund, sending you back an item that is now completely devoid of commercial value. It is an unacceptable financial vulnerability for anyone serious about e-commerce.
Managing Exceptions on Shopify: Custom Products, Sealed Goods, and Digital Downloads
Who is Exempt: The Practical Guide for Sellers of Custom or Perishable Products
Fortunately, the regulation protects the seller in certain common-sense scenarios where free refunds would cause unfair harm. If your store creates personalized or custom-made products (e.g., engraved jewelry, tailored clothing, or on-demand prints), these items are entirely excluded from the right of withdrawal. The same principle of exclusion applies to perishable goods or those sealed for hygienic reasons (such as underwear or cosmetics) that are opened after delivery. In my technical approach, I configure the store's flows so that the button is globally visible on the site for standard items, but I automatically exclude order pages that contain only personalized or exception-protected items.
The Delicate Management of Digital Products and Checkout Waiver
If you sell downloadable files, online courses, software, or e-books, managing withdrawals requires meticulous attention. Digital products are subject to a specific exemption, but under a very strict condition: you must implement a mandatory checkbox within Shopify's checkout module. Through this control, the buyer must explicitly declare their consent to the immediate start of the download and accept that, by doing so, they will definitively waive the right of withdrawal within 14 days. This information must then be recorded and included in the order confirmation email. If you forget this step, the customer will be able to download the file and then legally request a refund using the button.
Practical solutions for your Shopify Store: how to solve without installing external apps
Why Shopify doesn't have a native solution and why avoid third-party apps
To date, Shopify still doesn't offer a native pre-configured system to allow self-service returns for unregistered customers, only releasing partial updates focused solely on unfulfilled orders. This technical gap has led many merchants to hastily rely on external applications available on the Shopify App Store. However, adding new apps comes with obvious downsides: recurring monthly fees that eat into profits, additional scripts that slow down mobile performance, and the transfer of sensitive data to external databases over which you have no direct control. While waiting for the platform to release definitive features, I recommend focusing on a native, clean, and extremely efficient solution.
My method: the step-by-step guide for the native two-click flow
To secure your standard Shopify store without spending a penny on monthly subscriptions and without compromising your theme's speed, I've developed a native configuration path. This approach, integrated into my Zero-Friction Protocol, uses only the free resources already included in your standard subscription.
To start, access the Pages section of your control panel and create a new one titled 'Withdrawal Request'. The URL slug for this page will automatically become /pages/recesso-contratto. In your site's footer, add a clear menu item that links directly to this address.
The next step is to insert the completion form. Using your theme's visual editor, add a 'Custom Liquid' section to this new page. Inside, we'll embed a native Shopify form using the {% form 'contact' %} tag. Within it, we'll create three simple HTML text fields marked as mandatory: one for the customer's name, one for their email address, and one for their order number.
The magic of the double step required by law is solved with just a few lines of JavaScript code integrated directly into the Liquid block. We divide the display into two temporary screens: the first shows the input fields with a preliminary button that says 'Proceed with withdrawal'. When this button is clicked, the fields are hidden, and a summary screen appears with the actual final submission button, which must be strictly labeled 'Confirm withdrawal'.
To fulfill the obligation of sending an automatic confirmation on a durable medium, we use the free Shopify Flow tool, already available in your store. We create an automation that activates every time the contact form is submitted from the withdrawal page. This automation will immediately send a pre-configured email to the customer with the exact date and time of receipt, as well as a summary of their data.
In this way, your e-commerce is perfectly compliant from day one, mobile loading speed remains excellent, and your data is secure, waiting for Shopify to release a global automated solution. If you prefer to entrust me with the technical implementation on your store, you can find all the service details here /pages/lista-servizi-ifg-ecommerce.
Semantic Keyword Triggers
- Shopify Withdrawal Button 2026
- EU Directive 2023/2673 e-commerce
- Shopify Two-Step Withdrawal Form
- Consumer Code Withdrawal Penalties
- Configure Shopify Withdrawal Without Apps
