Withdrawal acknowledgement: why the screen is not enough

Most merchants preparing for 19 June 2026 focus on the button: putting it in place, making it visible, checking that it displays. That is necessary, but it is only half of the obligation. The other half, much less commented on, plays out just after the click: you must acknowledge receipt of the withdrawal, and do so on a durable medium. A confirmation shown on screen, the classic "your request has been sent", does not meet this condition. Here is why, and what actually does.

What the text requires

The withdrawal button is required by Directive (EU) 2023/2673. Alongside displaying the button, EU consumer law adds a distinct obligation: acknowledging receipt of the withdrawal.

Two phrases carry all the weight of this sentence: "without delay" and "durable medium". The first is intuitive. The second is the most common source of error, because its legal meaning does not match the everyday one.

The legal definition of a durable medium

The durable medium is not a vague notion left to everyone's judgement: it is defined by the Consumer Rights Directive 2011/83/EU, which harmonises the notion across the 27 Member States, and echoed identically in each national transposition.

Three cumulative criteria emerge from this definition:

1. Addressed personally to the consumer, not generic information displayed to everyone.
2. Storable and viewable later, the consumer must be able to keep it and return to it.
3. Reproducible identically, the content must not be capable of being unilaterally modified by the trader after the fact.

It is this third criterion that rules out the on-screen confirmation.

Why an on-screen message fails

A "your withdrawal has been recorded" banner that appears after the click satisfies none of the three criteria reliably: it disappears when the page is reloaded, the consumer does not "store" it, and it is entirely under the merchant's control. It is not a durable medium, it is an interface response.

The same reasoning applies to a confirmation page hosted on the merchant's site, even one accessible via a link. The Court of Justice of the European Union settled this as early as 2012.

In other words, redirecting the customer to a "customer account" or a web page that you control is not enough. The merchant's control over the content is precisely what disqualifies the medium.

What about email, then?

Good news: an email confirmation sent to the consumer's address does constitute a durable medium, provided its spirit is respected. The CJEU confirmed this in 2017.

The distinction is subtle but decisive: an email received in the consumer's inbox (Gmail, Outlook, etc.) meets the criteria, because it escapes the merchant's control once sent. On the other hand, a message deposited in an internal mailbox within a customer account, which the trader administers and can purge, falls back into the trap of the Content Services judgment.

The practical rule fits in one sentence: the acknowledgement of receipt must go to a mailbox that the consumer controls, not stay in a space that you control.

The second leg, often forgotten: the proof

Sending a compliant acknowledgement protects the consumer. But in the event of a CCPC inspection or a dispute, it is you who must demonstrate that you sent it, and when. Yet the email leaves and then escapes you: with no trace on your side, you can prove nothing.

This is where timestamped archiving comes in. Keeping, on your side, a dated and unaltered record of each withdrawal and its acknowledgement of receipt gives this set probative value; under the eIDAS Regulation (EU) 910/2014, electronic records are admissible as evidence across all 27 Member States.

The date of information is, moreover, not a detail: it is what starts the 14-day period for issuing a refund (Consumer Rights Directive 2011/83/EU, art. 13). Without an enforceable timestamp, you cannot demonstrate that date, and in the event of doubt, the reading most favourable to the consumer prevails.

Recap: what passes, what does not

How BackToMe handles these two requirements

This is exactly the role played by BackToMe's acknowledgement of receipt. On every click of the button, an email is sent to the consumer's address, therefore on a durable medium within the meaning of the case law, and, in parallel, the withdrawal and its acknowledgement are timestamped and archived with an integrity fingerprint (SHA-256 hash) on your side. You hold both ends: compliance towards the customer, and proof towards the inspector.

It is also for this reason that the on-screen confirmation you see after a test is never presented as "the acknowledgement": it confirms the recording, but the compliant acknowledgement is the email.

---

Key takeaway. The button is only the entry point. The obligation closes on the acknowledgement of receipt, which must be on a durable medium, which an interface is not, but which an email to the customer's address is. And because this email escapes you once sent, real compliance means keeping, on your side, a dated and unaltered record. To go further, see our feature on proof with probative value and the explanation of the durable-medium requirement.