In short
- Under section 21 of the Consumer Protection Act, 2019, the CCPA can direct a brand, creator or publisher to withdraw a misleading post, and fine a manufacturer or endorser up to ₹10 lakh.
- Section 89 adds imprisonment of up to two years for a manufacturer or service provider that causes a false or misleading ad. Section 88 punishes ignoring a CCPA direction.
- Creators have a due-diligence defence under section 21(5). Brands do not. A recorded claims check and approval is the brand's closest equivalent.
- ASCI treats the advertiser and the influencer as both responsible. We found no decision on a brand's liability for an unapproved creator claim, so assume exposure.
A brand is exposed when a creator's post makes a false or misleading claim about its product, even if the creator wrote every word. Under the Consumer Protection Act, 2019, the Central Consumer Protection Authority (CCPA) can direct the brand to withdraw the post and can fine a manufacturer up to ₹10 lakh. For a false or misleading ad that harms consumers' interests, the Act also provides for imprisonment. ASCI, the self-regulator, treats the brand and the creator as both responsible.
Our post on endorsement guidelines under consumer law explains what endorsers must do and lists the fines. This one reads the statute itself and asks the brand's question: who can be pursued, for what, and what defence do I hold? It sits under our ASCI influencer guidelines explainer and our guide to influencer marketing in India.
What the Act counts as a misleading advertisement
Section 2(28) of the Consumer Protection Act, 2019 defines a misleading advertisement as one that does any of four things:
- Falsely describes the product or service.
- Gives a false guarantee, or is likely to mislead consumers about its nature, substance, quantity or quality.
- Conveys an express or implied representation that would be an unfair trade practice if the manufacturer, seller or service provider made it.
- Deliberately conceals important information.
Section 2(18) defines an endorsement widely: any message, verbal statement or demonstration, or the depiction of a person's name, signature or likeness, that makes the consumer believe it reflects the opinion, finding or experience of the person. A creator saying "I used this for a month" is an endorsement. So is a creator's face on a brand's carousel.
The fourth limb matters for disclosure. Rule 14 of the CCPA's 2022 guidelines says a connection between endorser and brand that might materially affect the credibility of the endorsement, and that the audience would not reasonably expect, must be fully disclosed. A hidden payment is the textbook case.
Who the CCPA can act against
Section 21 gives the Authority four tools. Here they are, with the person each one reaches.
| Section | What the Authority can do | Who it reaches |
|---|---|---|
| 21(1) | Order the ad to be discontinued or modified, in the manner and time it specifies | Trader, manufacturer, endorser, advertiser or publisher |
| 21(2) | Penalty up to ₹10 lakh; up to ₹50 lakh for each later contravention | Manufacturer or endorser |
| 21(3) | Bar an endorser from endorsing any product for up to 1 year; up to 3 years for later contraventions | Endorser |
| 21(4) | Penalty up to ₹10 lakh | Any person who publishes, or is a party to the publication of, a misleading ad |
Read section 21(4) with care. It is not limited to manufacturers and endorsers, so an agency that commissions, approves or posts a misleading ad is within its words. That is our reading of the text, not a decided point.
The CCPA's 2022 guidelines point the same way. Rule 3 applies them to manufacturers, service providers and traders, and to any advertising agency or endorser whose services are used. Rule 12 puts duties on every manufacturer, service provider, advertiser or advertising agency: to be able to substantiate claims about ascertainable facts, to name the source and date of any research cited, and to avoid statements that mislead by implication, omission or exaggeration.
How the Authority sets the penalty
Section 21(7) lists what it must weigh: the population and area affected, the frequency and duration of the offence, the vulnerability of the people likely to be hurt, and the gross revenue from sales effected by the offence. Each of these is something a campaign can enlarge. A partnership ad aimed at a whole state raises the area. A claim aimed at new parents or patients raises vulnerability. A discount-code post that drives sales gives the Authority a revenue figure to point to. Amplification is a reason for a stricter check, not a lighter one.
The criminal provisions
Two sections go beyond penalties.
- Section 89 punishes a manufacturer or service provider who causes a false or misleading advertisement to be made that is prejudicial to the interest of consumers. A first offence carries imprisonment of up to two years and a fine of up to ₹10 lakh. Each later offence carries up to five years and a fine of up to ₹50 lakh.
- Section 88 punishes failing to comply with a direction of the Authority under section 20 or 21: imprisonment of up to six months, a fine of up to ₹20 lakh, or both.
The first is the one a brand should read twice. It speaks of a manufacturer or service provider who "causes" the advertisement, and a brand commissions creator posts. We found no reported decision applying section 89 to a creator's unapproved claim, so we cannot tell you where a court would draw the line. We would not want to test it.
Public enforcement against influencers is thin. We found no published CCPA action against a named influencer in 2025 or 2026. The Authority does act against advertisers, though: by 17 December 2024 it had issued 45 notices to coaching centres and imposed ₹61,60,000 in penalties on 19 of them, according to the Press Information Bureau. Those were the centres' own ads, but they show the Authority uses its penalty power. For betting, the Ministry of Information and Broadcasting warned influencers in March 2024 that non-compliance could bring proceedings under the Act, including removal of posts or accounts. We cover that in our post on surrogate advertising.
The defences, and who holds them
| Defence | In the Act | Who | The catch |
|---|---|---|---|
| Due diligence to verify the claims | Section 21(5) | Endorser | Covers the penalty and the endorsement ban. It does not mention the brand |
| Published in the ordinary course of business | Section 21(6) | Any person | Lost if the person knew of the Authority's earlier order to withdraw or modify |
| Hearing before any order | Section 21(8) | Everyone | A procedural right, not a defence on the merits |
The brand holds no due-diligence defence in the text of section 21. What it can hold is evidence that it ran its own diligence: a claims sheet with proof, a recorded approval, a label checked before posting, a takedown that happened fast. That evidence will not guarantee an outcome. It does answer the question any regulator asks first, which is what you did to stop it.
ASCI: the same idea, without the fines
ASCI's influencer guidelines say responsibility for the disclosure and the content of the ad lies with both the advertiser and the influencer. The influencer must make the disclosures. The advertiser must ensure the post conforms to the ASCI Code and, where needed, call on the influencer to delete or edit it. The Code itself places responsibility on all who commission, create, place or publish an ad, which brings in agencies and media.
ASCI is not a court, but it moves quickly and at scale. Of the 1,609 influencer ads it processed in FY2025-26, 97.3 percent needed modification, according to its May 2026 press release.
ASCI also runs an Endorser Due Diligence service for celebrities and other endorsers. On the page as we read it on 1 November 2026, the panel reviews the script and the claim support in seven business days, for ₹75,000 (non-technical) or ₹1,90,000 (technical). The advice is issued in the endorser's name and is advisory only. A brand might fund it for a high-risk claim, but ASCI's own page does not say what protection it gives, so do not assume any.
A worked example (hypothetical)
A skincare brand books a creator for a Reel. The approved script says the serum "left my skin feeling smoother after two weeks". On the day, the creator adds "clears acne in three days" in the caption, and the post goes live without a second review.
- The creator is exposed as endorser. Her section 21(5) defence is weak if she never saw evidence for the claim.
- The brand is exposed as manufacturer, and as advertiser if it boosts the post.
- An agency that posted or approved the caption could be a party to the publication.
- What the brand's file shows decides the tone of the conversation: the approved script, a contract line barring unapproved claims, a claims sheet that did not include the acne claim, and the time it took to edit the caption.
The post would also raise issues under the rules for cosmetics, covered in our post on cosmetics claims. The point here is only that the file, not the intention, is what the brand can show.
Controls that reduce exposure
- Approve the final cut, not the idea. Edits after approval are where unapproved claims arrive. Our compliance checklist has a ten-question approval sheet.
- Give creators a claims sheet. Wording they may use, evidence behind it, words they may not.
- Write the takedown time into the contract, in hours, and the right to withhold payment until a fix is done. See the influencer contract guide.
- Make the agency's duties explicit in its own agreement: who checks claims, who approves, who keeps records. The agency contract checklist covers it.
- Treat amplification as a new decision. Before a post becomes a partnership ad, re-check claims against the section 21(7) factors: audience size, vulnerability and sales.
- Keep the file. Brief, claims sheet, approvals, label screenshots and takedown log.
- Rehearse the first hour. Who can edit or pull a post, and who talks to the regulator, should be decided before launch. See influencer crisis management.
What we could not source
We did not find a court decision on a brand's liability for an unapproved creator claim, a published CCPA action against a named influencer in 2025 or 2026, or authority on whether a contractual indemnity covers a statutory penalty. Treat each as open and ask counsel.
If you want a campaign run with the approval trail built in, send us a brief. Our strategy service includes the claims sheet and approval design, and our D2C brands page shows the creator work it supports.
This is general information, not legal advice.
Sources
- The Consumer Protection Act, 2019 (sections 2(18), 2(28), 21, 88 and 89), Gazette of India (9 Aug 2019)
- Guidelines for Prevention of Misleading Advertisements and Endorsements for Misleading Advertisements, 2022 (rules 3, 12, 13, 14), Central Consumer Protection Authority, Gazette of India (9 Jun 2022)
- Centre issues Guidelines on Prevention of Misleading Advertisements and Endorsements for Misleading Advertisements, 2022, PIB, Department of Consumer Affairs (10 Jun 2022)
- ASCI Code guidelines: influencer advertising in digital media (responsibility, due diligence), ASCI (undated page, accessed 1 Nov 2026)
- The ASCI Code: responsibility for the observance of this code, ASCI (undated page, accessed 1 Nov 2026)
- Endorser Due Diligence service, ASCI (undated page, accessed 1 Nov 2026)
- CCPA issues notices to 45 coaching centers for misleading advertisement; imposes penalty of Rs 61,60,000 on 19 coaching institutes, PIB, Ministry of Consumer Affairs (17 Dec 2024)
- Ministry of I&B cautions social media influencers against endorsing offshore online betting and gambling platforms, PIB, Ministry of Information and Broadcasting (21 Mar 2024)
Frequently asked questions
Is a brand liable for what an influencer says about its product?
It can be. The Consumer Protection Act, 2019 lets the CCPA direct a manufacturer, advertiser, endorser or publisher to withdraw a misleading ad, and fine a manufacturer or endorser up to ₹10 lakh. ASCI also holds the advertiser responsible alongside the influencer. We found no decision on a creator's unapproved claim, so treat it as your risk. See our compliance checklist.
Can a brand go to jail for an influencer's misleading post?
Section 89 allows imprisonment of up to two years and a fine up to ₹10 lakh for a manufacturer or service provider that causes a false or misleading advertisement prejudicial to consumers' interests, and up to five years and ₹50 lakh for a repeat. Whether a creator's own claim was 'caused' by the brand would be argued on its facts. Ask counsel.
Is the influencer or the brand responsible under ASCI rules?
Both. ASCI's influencer guidelines put responsibility for the disclosure and the content of the ad on the advertiser and the influencer. The influencer makes the disclosures; the advertiser must make sure the post fits the ASCI Code and can call on the influencer to edit or delete it. Our ASCI guide sets out the split.
Does a contract indemnity protect a brand from a CCPA penalty?
It may let you recover costs from a creator or agency, but it does not stop the Authority acting against you. Whether an indemnity for a regulatory penalty can be enforced is a legal question we have not seen settled, so ask counsel before relying on one. Our contract guide covers the clauses worth having anyway.
What is the endorser's due diligence defence?
Section 21(5) says an endorser is not liable to the penalty or the endorsement ban if they exercised due diligence to verify the claims made. It protects the creator, not the brand. For that reason a brand should give creators the evidence behind each claim and keep a record that it did.
What happens if a brand ignores a CCPA direction to take a post down?
Section 88 punishes failing to comply with a direction under sections 20 and 21 with imprisonment of up to six months, a fine of up to ₹20 lakh, or both. Section 21(6) also removes the ordinary-course-of-business defence for anyone who knew of the Authority's order. Act on a takedown notice the same day. Our crisis guide shows how.