The European Commission informed X, formerly Twitter, that it may be the first company found to be in violation of the European Union’s Digital Services Act (DSA) in areas “linked to dark patterns, advertising transparency, and data access for researchers.”

On Friday, the commission announced its preliminary findings of X’s potential violations of the DSA in a press release, noting that it may be “using dark patterns to deceive users.”

The commission said X, which is categorized as a Very Large Online Platform under the DSA’s rules, may have violated the regulation in three areas.

First, its user verification system, the blue checkmark, could be deceiving users since changing to a subscription model under owner Elon Musk. The change “negatively affects users’ ability to make free and informed decisions about the authenticity of the accounts and the content they interact with. There is evidence of motivated malicious actors abusing the ‘verified account’ to deceive users,” the commission alleged.

Second, the DSA requires companies to maintain a “searchable and reliable advertisement repository,” but the commission alleged X’s system lacks the law’s required for transparency.

Third, the DSA also requires that researchers be allowed to independently access its public data. The commission alleged X’s policies regarding research “dissuade researchers from carrying out their research projects or leave them with no other choice than to pay disproportionally high fees.”