The European Commission has fined X €120m for breaching the EU Digital Services Act (DSA) due to the deceptive design of its ‘blue checkmark’, the lack of transparency in its advertising repository, and its failure to provide researchers with access to public data, in what marks the first non-compliance decision under the EU DSA. The Commission found that X’s paid ‘verified’ status misleads users by suggesting verification without meaningful checks, exposing them to impersonation and manipulation. It also determined that X’s ads repository lacks required transparency, including missing information on ad content, topics and paying legal entities, alongside design barriers that hinder scrutiny of online advertising risks. Further, the Commission notes that X’s restrictive terms and obstructive processes prevent eligible researchers from accessing public data, undermining research into systemic risks in the EU. The Commission requires X to, within 60 working days, inform the Commission of measures to end the infringement of Article 25(1) DSA relating to deceptive design, and within 90 working days submit an action plan addressing violations of Articles 39 and 40(12) on advertising transparency and data access, subject to subsequent review by the Board of Digital Services and final Commission decision. Failure to comply may result in periodic penalty payments.