The European Union has served Elon Musk’s X with a €120 million (about $140 million) penalty for violating the bloc’s digital service rulebook, including over the “deceptive design” of its blue checkmark. Today’s announcement marks the first time that a company has been fined under the landmark Digital Services Act (DSA) law for curbing “illegal and harmful activities” on online platforms, and follows the EU launching a multifaceted investigation into X in December 2023.

“Deceiving users with blue checkmarks, obscuring information on ads and shutting out researchers have no place online in the EU,” EU tech chief Henna Virkkunen said in a statement. “The DSA protects users. The DSA gives researchers the way to uncover potential threats. The DSA restores trust in the online environment. With the DSA’s first non-compliance decision, we are holding X responsible for undermining users’ rights and evading accountability.”

In July 2024, the EU preliminarily ruled that X was failing to comply with obligations around advertising transparency, data access for researchers, and “dark patterns” — deceptive interface features designed to trick users. X’s blue checkmark system was specifically called out for deceiving users by allowing anyone to pay to be “verified,” making it harder to determine the authenticity of X accounts.

The EU can charge companies up to 6 percent of their global revenue for DSA violations. As X is a private company — purchased by Musk for $44 billion in October 2022 and again by his artificial intelligence company, X AI, in March 2025 for $33 billion — it’s unclear what its potential maximum penalty could have been. X can appeal the fine, or could still reach a settlement with the EU by implementing changes that satisfy DSA compliance concerns.

The 2023 investigation was also launched to scrutinize X’s moderation practices and the dissemination of illegal or harmful content on the platform, which is currently still ongoing and could incur further penalties.