"caught out" seems emotive to me. Failed to read the T&Cs perhaps would be more accurate? I guess the former transfers blame away onto someone else whereas the latter retains responsibility?