Dark patterns are user interface designs that deceive, manipulate or pressure users into decisions they would not otherwise make, such as buying extra items, sharing more personal data or staying in a subscription. In tech regulation they are treated as a form of unfair commercial practice, and several EU and US laws now prohibit them explicitly. Regulators increasingly prefer the neutral label deceptive design patterns.
The term was coined in 2010 by a user experience designer who cataloged tricks used on commercial websites. Since then it has moved from design criticism into statute books: the Digital Services Act, the GDPR consent rules, the Data Act, the AI Act and US state privacy laws all contain provisions aimed at manipulative interface design.
How dark patterns exploit user behavior
Dark patterns work by exploiting predictable cognitive biases rather than by offering better value. People tend to accept defaults, avoid effort, react to scarcity and feel uncomfortable refusing. A design that makes one option easy and the alternative hard steers behavior without ever stating anything false.
The mechanism usually combines three levers: asymmetry between choices (a bright accept button and a faint text link to refuse), friction added to the option the business dislikes, and misdirection through wording, timing or visual hierarchy. Because each lever on its own can look like ordinary design, regulators assess the overall effect on the average consumer.
Small screens and personalization amplify the effect. On a phone, a refuse option pushed below the fold or into a secondary menu is effectively invisible, and behavioral data allows a service to show pressure messages precisely to the users most likely to respond. For this reason, enforcement increasingly targets systematic design choices tested at scale rather than isolated wording.
Common types of dark patterns
Classifications vary between regulators and researchers, but most catalogs share a core of recurring patterns. The table below groups the types most often cited in enforcement actions.
| Pattern | How it works | Typical setting |
|---|---|---|
| Hard to cancel | Easy sign-up, cancellation hidden behind many steps | Subscriptions |
| Drip pricing | Mandatory fees revealed only at checkout | Tickets, travel, delivery |
| False urgency | Fake countdown timers or invented scarcity | Retail and booking sites |
| Confirmshaming | Refusal option worded to make users feel guilty | Newsletter and discount pop-ups |
| Preselection | Add-ons or consents checked by default | Checkout and cookie banners |
| Sneaking | Items added to the basket without a clear choice | Online shops |
| Nagging | Repeated prompts until the user gives in | Apps requesting permissions |
| Disguised advertising | Ads styled as content or navigation | Search results and feeds |
Legal rules that prohibit dark patterns
In the European Union, dark patterns are caught by several overlapping instruments. The Unfair Commercial Practices Directive bans misleading and aggressive practices and blacklists specific tricks such as false claims that a product is available only for a very limited time. The Digital Services Act, Article 25, prohibits online platforms from designing interfaces that deceive or manipulate users, to the extent that the practice is not already covered by consumer or data protection law.
| Instrument | Relevant rule | Typical target |
|---|---|---|
| Unfair Commercial Practices Directive | Misleading and aggressive practices | Fake urgency, hidden costs |
| GDPR | Consent must be free, specific and unambiguous | Manipulative cookie banners |
| Digital Services Act | Article 25 interface design ban | Platform interfaces |
| Data Act | Ban on undermining user choice for data access | Third parties receiving device data |
| AI Act | Ban on manipulative AI techniques | Systems that distort behavior |
| US state privacy laws | Consent obtained through dark patterns is invalid | Data collection flows |
In the United States, the Federal Trade Commission pursues dark patterns as unfair or deceptive acts, with a strong focus on subscription traps and cancellation flows, while California and other states define the term in privacy statutes. The EU is also preparing a Digital Fairness Act that is expected to address dark patterns, addictive design and subscription traps more directly.
Persuasive design versus manipulative design
Not every persuasive element is unlawful. Good design legitimately guides users, and highlighting a recommended plan or offering a reminder is ordinary practice. The legal line is crossed when the design materially distorts the decision of an average user, typically because information is hidden, false or presented so that a free choice becomes difficult.
| Design element | Usually acceptable | Likely a dark pattern |
|---|---|---|
| Default settings | Privacy-friendly defaults | Pre-ticked paid add-ons |
| Visual emphasis | Highlighting a recommended plan | Hiding the refuse option in faint text |
| Urgency messages | Accurate stock or deadline information | Countdown that resets on reload |
| Cancellation flow | One confirmation step | Phone call or multiple retention screens |
| Price display | Total price shown early | Fees added at the final step |
Auditing interfaces and avoiding enforcement
Companies reduce risk by applying a symmetry test: accepting and refusing, subscribing and canceling should require comparable effort, visibility and number of steps. EU consumer law adds concrete duties, including the requirement to show the total price including unavoidable fees and, for distance contracts, an easily accessible withdrawal function.
- Map every consent and purchase flow and count the clicks for each option.
- Test with real users to see whether they understand what they agreed to.
- Review A/B tests that optimize conversion, since they often produce dark patterns unintentionally.
- Document design decisions so that the intent and the effect can be explained to a regulator.
A frequent mistake is assuming that legal text in the terms cures a manipulative interface. Regulators judge what users actually see and do, so a disclosure buried in the terms rarely saves a design whose overall impression is misleading.
Explained without jargon
Dark patterns are tricks built into apps and websites. They do not lie outright. Instead, they make the choice the company prefers easy and the other choice awkward, confusing or embarrassing.
A familiar case is a subscription you can start with one tap but can only end through a phone call. Another is a cookie banner with a big green button to accept everything and a tiny gray link to refuse. The law increasingly says that saying no must be as easy as saying yes, and that prices must be honest from the start.
A typical use case
An online streaming service in the EU lets customers subscribe with two clicks but requires seven screens, including three retention offers and a survey, to cancel. A consumer authority receives complaints and opens an investigation into the cancellation flow and a countdown banner that restarts whenever the page is reloaded.
The authority finds that the countdown is false urgency under the Unfair Commercial Practices Directive and that the cancellation path is an aggressive practice. The service redesigns the flow so that cancellation takes one confirmation screen, removes the timer and shows the full price including taxes on the first page.
The result is fewer complaints and a closed investigation, while the service still presents one optional retention offer, which the authority accepts as legitimate persuasion.