01 - The Brief
Three things worth knowing this week
21 EU member states missed the transposition deadline
The directive required all 27 member states to transpose it into national law by 19 December 2025. By 30 January 2026, the European Commission had opened infringement procedures against 21 of them for failing to do so. Germany, France, and Italy have fully transposed. Belgium had not transposed at all as of last week. This does not change the June 19 obligation for merchants, the directive applies regardless of national transposition status, but it explains why enforcement intensity will vary significantly by country in the early months.
Shopify launched a cancellation feature on June 17 but does it fully comply?
Shopify rolled out a self-serve cancellation flow on June 17, two days before the deadline. For merchants waiting on a native solution, this is welcome news. However based on analysis from multiple compliance sources, the feature may fall short of the full Article 11a requirements for most stores — specifically around the exact labelling requirement, the two-step confirmation flow, and guest order handling. Merchants who have already installed a dedicated app like Revoq or EU Withdrawal Button are in a safer position. If you are relying on Shopify's native feature, verify that it meets all four requirements: correct labelling, two-step flow, automatic timestamped confirmation email, and accessibility without login before the June 19 deadline.
Consumer protection associations are ready to act
Based on what happened after Germany's Kündigungsbutton law took effect in July 2022, the first Abmahnung letters from consumer protection associations typically arrive within days of a deadline passing, not weeks or months. The Verbraucherzentrale Bundesverband and similar associations actively monitor new compliance requirements. Merchants who assumed there would be a grace period after June 19 should reassess that assumption.
02 — The Deep Dive
What enforcement actually looks like and what to do if it finds you
Issue #1 covered what the withdrawal button requires. This issue covers what happens after June 19 if you do not have one or if yours has a technical flaw you have not spotted yet.
The most immediate enforcement risk is not a fine from a regulator. It is a cease-and-desist letter from a consumer protection association or a competitor.
The Abmahnung explained: An Abmahnung is a formal cease-and-desist warning under German law. It can be sent by a consumer protection association, a competitor trade association, or in some cases a competitor directly. It demands you stop the infringing practice, sign an injunctive declaration, and often pay legal costs. It is serious, but it is not the end if you respond correctly.
The §312k Kündigungsbutton law, Germany's existing cancellation button for subscriptions is the closest precedent. When it took effect in July 2022, warning letters started arriving within weeks. Merchants who ignored them faced interim injunctions. Merchants who got compliant quickly and responded within the stated deadline, typically one to two weeks, were in a materially better legal position.
The withdrawal button follows the same pattern. The combination of a clear legal deadline, measurable technical requirements, and active consumer protection bodies makes early enforcement highly likely in Germany specifically.
What triggers an Abmahnung
Based on experience with the Kündigungsbutton, the most common triggers are not missing buttons but implementation errors. A button that exists but is buried in the footer without being clearly labelled. A flow that skips the second confirmation step. A confirmation email that does not include a timestamp. An order management page that requires login to access the withdrawal function. Any of these constitutes non-compliance even if you have technically added a button.
What to do if you receive one
Do not ignore it. Every Abmahnung includes a response deadline, usually one to two weeks. Missing that deadline escalates the situation to an interim injunction, which is significantly harder and more expensive to resolve. The correct response is to get compliant immediately, respond within the stated timeframe, and seek legal advice from a lawyer familiar with German consumer law. Getting compliant fast after receiving a warning is recognised as a mitigating factor.
The structural penalty most operators still underestimate
Beyond Abmahnungen and fines, there is a consequence that does not require any enforcement action at all. If your withdrawal button is missing or non-compliant, the 14-day withdrawal window automatically extends to 12 months and 14 days for every transaction. That means any customer who bought from you without a compliant withdrawal mechanism in place can exercise their right for nearly a year after purchase. For stores with meaningful EU volume, that is a significant financial exposure.
Action plan - if you are not compliant yet
1 Shopify: install revoq or EU Withdrawal Button from App store. Both take under 30 minutes to configure correctly. Verify the button works for guest orders, not just logged-in customers.
2 WooCommerce: if you use Germanized, update to version 4.0 or above, it includes the withdrawal button natively. If not, install the vendidero EU Oder Withdrawal Button plugin, which is free and open source.
3 All platforms: update your Widerrufsbelehrung (Withdrawal policy) to reference the URL of the new withdrawal function. Missing this step invalidates the compliance even if the button works correctly.
4 Test the full flow yourself: button visible without login, two-step confirmation, automatic timestamped email received, works on mobile.
5 If you sell subscriptions in Germany: you need two separate buttons. The Kundigungsbutton under §312k for subscriptions and the new Widerrufsbutton under §356a BGB for standard purchases. They are different legal requirements and cannot be combined.
This article is for informational purposes only and does not constitute legal advice. Enforcement patterns, fine amounts and implementation requirements vary by EU member state. Consult a qualified legal adviser familiar with consumer law of your target markets before making compliance decisions.
03 — The Stack
Given this week's topic, the Stack review covers the most-cited Shopify app for withdrawal button compliance. We reviewed it against the technical requirements of Article 11a.
GDPR compliant ✓Works for guest orders ✓Two-step flow ✓Auto timestamped email ✓Euro pricing ✓Free plan available ✓
Revoq installs through the Shopify Theme Editor without custom development. It handles both account holders and guest orders. The guest order capability is the most important technical detail since the directive requires the button to work without login. The two-step confirmation flow and automatic confirmation email with timestamp are both included out of the box.
The free plan covers up to 500 withdrawal requests per month, which is sufficient for most small and mid-size stores. Rated 4.9 on the Shopify App Store.
The one limitation worth noting: Revoq covers the Widerrufsbutton but not the Kündigungsbutton. If you run subscriptions in Germany you need a separate solution for the cancellation button requirement under §312k. These are two different legal obligations and cannot be handled by the same app..
04 — The Number
50,000
50,000
Views on two Reddit posts about the EU withdrawal button, posted to r/Shopify and r/ecommerce in the 24 hours before the June 19 deadline. 300+ combined shares:. The single most common question in both threads: "I had no idea this existed, does it apply to me?"
Source: Reddit analytics, June 2026
The information gap around EU compliance for English-language operators is real and measurable. 50,000 people engaged with a post explaining a law that takes effect in two days. Most had not heard of it. That is the gap this newsletter exists to close.