AliExpress fined almost $630 million over illegal product sales

The European Commission didn't just fine AliExpress. It dismantled the central argument every giant marketplace has hidden behind for years: that volume makes policing impossible. €550 million — roughly $629 million — is the price tag the EU attached to that excuse. The message is deliberate. Scale is not an excuse. Risks must be identified and addressed systematically. Those words, from EU tech chief Henna Virkkunen, are the real precedent. The money is merely the punctuation.

AliExpress failed on the basics. The Commission found the company allocated insufficient staff to verify products. That is a choice, not a constraint. A platform that processes millions of listings daily decided how many human eyes and algorithmic checks to fund. It chose wrong. Unsafe toys and dangerous cosmetics remained live for multiple weeks after detection. Weeks. Not hours. Not days. Weeks. A child's toy that fails safety standards, a cosmetic with prohibited ingredients — these sat on digital shelves while AliExpress moved at the pace of bureaucracy. The fine reflects that lethargy as much as the violations themselves.

The Digital Services Act was built for this moment. The DSA obligates very large online platforms to assess systemic risks, mitigate them, and submit to independent audits. AliExpress, designated a VLOP in 2023, had the playbook. It ignored the assignment. The Commission's investigation concluded the platform didn't take effective measures to reduce the dissemination of illegal products. That phrasing — "didn't take effective measures" — is regulatory language for "did the bare minimum and hoped it would pass." It didn't.

Temu's €230 million fine in May was the warm-up act. Two Chinese cross-border giants, two massive DSA penalties within months. The pattern is unmistakable. The EU is treating the business model itself — ultra-low-cost, high-velocity, manufacturer-direct shipping with minimal intermediation — as a risk category. That model relies on volume drowning oversight. The Commission just announced that strategy is illegal. Platforms cannot outsource safety to the sheer speed of their own throughput.

AliExpress has until October 20, 2026 to remedy the breach. That deadline is generous to the point of contradiction. A platform that cannot mobilize sufficient verification staff in the present gets sixteen months to fix a structural deficit? The periodic fines threatened for non-compliance suggest the Commission knows the deadline is aspirational. Real remediation would require rewiring the onboarding pipeline, the seller vetting flow, the automated detection stack, the human review escalation path. That is not a sixteen-month project for a company that treated verification as a line item to minimize. It is a cultural overhaul.

The deeper question is whether fines alone reshape incentives. €550 million is enormous — roughly 3% of Alibaba Group's 2023 net income. Painful but absorbable. If the cost of non-compliance remains a calculable line item, some platforms will calculate. The DSA allows periodic penalty payments up to 5% of average daily worldwide turnover for each day of continued infringement. That escalation clause is the true weapon. It turns delay into exponential exposure. AliExpress now faces a choice: rebuild the compliance architecture or bet that the EU's enforcement stamina breaks first.

History suggests the EU does not blink. GDPR fines started small and climbed. The DMA designated gatekeepers and forced interoperability. The DSA is the newest blade, and the Commission is sharpening it publicly. Virkkunen's statement — "The spread of counterfeit clothing, unsafe toys, dangerous cosmetics and other illegal and harmful products is not an unavoidable cost of shopping online" — frames consumer protection as non-negotiable. Not a trade-off. Not a balance. A floor.

Western platforms should watch closely. Amazon, Meta, Google — they operate under the same regime. The Commission has now established that "insufficient staff" is an admission of liability, not a mitigation plea. Every VLOP's next audit will measure verification headcount against risk surface area. The math must work. If it doesn't, the fine schedule is published.

AliExpress will appeal. The legal process will stretch years. But the operational signal is immediate: the EU expects platforms to treat safety as engineering, not overhead. The era of "we're too big to police" ended this week. The invoice has arrived.