{"id":355,"date":"2021-02-24T07:15:00","date_gmt":"2021-02-24T06:15:00","guid":{"rendered":"https:\/\/stage.usercentrics.com\/?post_type=knowledge&p=19114"},"modified":"2025-06-23T13:14:40","modified_gmt":"2025-06-23T11:14:40","slug":"dark-patterns-and-how-they-affect-consent","status":"publish","type":"knowledge","link":"https:\/\/usercentrics-poc.psapp.dev\/us\/knowledge-hub\/dark-patterns-and-how-they-affect-consent\/","title":{"rendered":"Dark patterns: What you need to know and examples"},"content":{"rendered":"\n

Good user experience (UX) design should make digital experiences intuitive and user-friendly. However, some companies use deceptive tactics to influence user decisions. These tactics, known as nudging or dark patterns, can exploit cognitive biases to manipulate users into taking actions they didn\u2019t intend, like subscribing to unwanted services, sharing personal data, or making unnecessary purchases. <\/p>\n\n\n\n

Understanding how dark patterns work can help marketers avoid these practices, and enable companies to create ethical designs and avoid regulatory risks.<\/p>\n\n\n\n

What is a dark pattern?<\/h2>\n\n\n\n

The term “dark pattern” was coined by London-based UX designer Harry Brignull. He defines a dark pattern as, “a type of user interface that appears to have been carefully crafted to trick users into doing things that are not in their interest and is usually at their expense<\/em>.”<\/p>\n\n\n\n

At their core, dark patterns exploit cognitive biases. They leverage the way our brains process information to nudge us toward specific decisions, often against our best interests.<\/p>\n\n\n\n

These deceptive design tactics can pop up across websites, forms, emails, and apps. They are designed to trick or pressure users into doing things they may not have meant to do, or even things they actively wanted to avoid. Instead of using clear communication or fair persuasion, they manipulate users into giving up data, staying on a site, or keeping a subscription.<\/p>\n\n\n\n

Types of dark patterns<\/h2>\n\n\n\n
\"Infographic<\/figure>\n\n\n\n

Dark patterns take many forms, and different sources may categorize them in various ways. Below, we\u2019ve outlined the dark patterns that are the most commonly used. Each is designed to manipulate users into making choices that benefit the company rather than the user.<\/p>\n\n\n\n

Sneaking<\/h3>\n\n\n\n

Sneaking occurs when companies hide crucial information or actions to push users toward a specific decision. It can take many forms, such as hidden fees that only appear at checkout, automatic signups for paid services without obtaining clear consent, or pre-selected checkboxes that commit users to unwanted subscriptions. The goal is to get users to agree to something without realizing it until it’s too late.<\/p>\n\n\n\n

Forced continuity<\/h3>\n\n\n\n

Many subscription services rely on forced continuity, which means that users sign up for a free trial but are automatically charged once the trial period ends. Often, these services provide little to no warning before billing begins and make cancellation difficult.<\/p>\n\n\n\n

Instead of a simple \u201cCancel\u201d button, users might have to navigate a complex process involving multiple confirmation steps or even direct customer service interactions.<\/p>\n\n\n\n

Roach motel<\/h3>\n\n\n\n

A roach motel is a design that makes signing up for a subscription or service easy, but canceling or opting out deliberately difficult. Users may find themselves jumping through hoops \u2014 contacting support, mailing a cancellation request, navigating a maze of menu options, etc. \u2014 just to leave a service. The inconvenience discourages cancellations and prolongs unwanted subscriptions.<\/p>\n\n\n\n

Misdirection<\/h3>\n\n\n\n

Misdirection steers users toward an action they didn\u2019t intend by using visual tricks. An example of this dark pattern might be a brightly colored, bold \u201cSubscribe\u201d button that is positioned prominently, while the option to opt out is smaller, less visible, only an unobtrusive text link, or written in a confusing way. This tactic plays on user expectations, nudging them toward decisions they might not have made otherwise.<\/p>\n\n\n\n

Privacy Zuckering<\/h3>\n\n\n\n

Named after Facebook\u2019s founder, Privacy Zuckering is a deceptive practice that tricks users into sharing more personal data than they intended. This often happens through misleading privacy settings, vague descriptions of data usage, or default options that enable extensive tracking and data collection. Users may believe they are protecting their privacy, only to discover later that they unknowingly consented to extensive data sharing.<\/p>\n\n\n\n

Confirmshaming<\/h3>\n\n\n\n

Confirmshaming relies on guilt or social pressure to influence user behavior. This tactic is commonly seen in popups that present declining an offer in a negative light.<\/p>\n\n\n\n

For example, a website might prompt users with a message like, \u201cNo thanks, I prefer to stay uninformed\u201d when they try to reject a newsletter subscription, or \u201cThat\u2019s okay, I like paying full price\u201d if a prospect declines to sign up for something when offered a discount. The goal is to make users feel guilty or ashamed about their decision and reconsider.<\/p>\n\n\n\n

Bait and switch<\/h3>\n\n\n\n

A bait and switch occurs when users expect one outcome but experience another. A common example is a button that appears to close a popup but instead triggers a signup or redirects the user to an unrelated page. This deceptive approach exploits user expectations to drive engagement in misleading ways.<\/p>\n\n\n\n

Disguised ads<\/h3>\n\n\n\n

Disguised ads blend seamlessly with regular content, which encourages users into clicking on them. They may appear as recommended articles, in-site navigation elements, or even user generated content. Because they mimic real content, users engage with them without realizing they are advertisements.<\/p>\n\n\n\n

Hidden costs<\/h3>\n\n\n\n

Hidden costs are additional fees that only appear at the final step of a transaction. A user might add an item to their cart expecting a certain total, only to discover extra charges right before checkout, such as processing fees, mandatory add-ons, or inflated shipping costs. By revealing these costs late in the process, companies increase the likelihood that users will proceed with the purchase rather than abandon it.<\/p>\n\n\n\n

Trick questions<\/h3>\n\n\n\n

Trick questions use confusing language to manipulate user responses, often through double negatives or misleading phrasing.<\/p>\n\n\n\n

For example, a form might include a checkbox labeled \u201cUncheck this box if you don\u2019t want to receive promotional emails.\u201d This type of wording may confuse users, increasing the chance they will make an unintended selection.<\/p>\n\n\n\n

Relentless repeated requests<\/h3>\n\n\n\n

A newer tactic that has been seen, e.g. in the current BeReal case<\/a>, involves providing a much better user experience for users that do what the service wants, and relentless repeated requests and disrupted user experience for those who don\u2019t.<\/p>\n\n\n\n

For example, a user opens a new app and sees a banner requesting consent for targeted advertising. If they accept, they never see the banner again. But if they decline, the banner reappears every time they attempt to use the app. In the BeReal case it\u2019s an app users are encouraged to use multiple times a day, leading to significant likely frustration for users.<\/p>\n\n\n\n

How do dark patterns work?<\/h2>\n\n\n\n

Dark patterns take advantage of how humans process information. They exploit cognitive biases, mental shortcuts that help us make decisions quickly, but that can also lead to manipulation.<\/p>\n\n\n\n

For example, the \u201cdefault effect\u201d makes people more likely to stick with pre-selected options. That\u2019s why companies often use pre-checked boxes for newsletter signups or data-sharing permissions. Users may not notice these settings or assume they are necessary.<\/p>\n\n\n\n

Similarly, dark patterns use urgency and scarcity to make people worry that they are missing out on something. Fake countdown timers or messages like \u201conly two left in stock\u201d create artificial pressure, nudging users to act impulsively.<\/p>\n\n\n\n

These tactics can lead to unintentional purchases, privacy violations, and frustration. So, while they may initially benefit the business, they also damage trust in the long run.<\/p>\n\n\n\n

Dark patterns examples<\/h2>\n\n\n\n

Dark patterns are more common than you may think. A European Commission study from 2018 found that 97% of the most popular websites and apps<\/a> used at least one deceptive design tactic to manipulate users.\u00a0<\/p>\n\n\n\n

The numbers improved a bit with time, with the FTC in the US, as well as the International Consumer Protection and Enforcement Network (ICPEN) and Global Privacy Enforcement Network (GPEN) discovering in 2024 that 75.7% of 642 companies\u2019 sites and apps used least one dark pattern<\/a>, with 66.8% using two or more.<\/p>\n\n\n\n

Whether it\u2019s making subscriptions hard to cancel, sneaking in extra fees, or creating fake urgency for purchases, these tactics are designed to push people into decisions they wouldn\u2019t necessarily normally make. <\/p>\n\n\n\n

Here are three real-world dark pattern examples.<\/p>\n\n\n\n

Amazon\u2019s Prime cancellation process<\/h3>\n\n\n\n

Until recently, Amazon made it notoriously difficult to cancel Prime subscriptions. Users had to click through multiple pages filled with reminders about Prime benefits, special renewal offers, and unclear buttons before they could finally cancel.<\/p>\n\n\n\n

This is an example of a “roach motel” dark pattern, where signing up is easy, but getting out is deliberately complicated. The goal was to discourage cancellations by making the process time-consuming and confusing.<\/p>\n\n\n\n

Hidden fees on ticket websites\u00a0<\/h3>\n\n\n\n

Ticketing platforms, such as Ticketmaster, often advertise low prices upfront, only to reveal extra fees at checkout. A ticket listed at USD 50 might end up costing USD 80 or more after service charges, facility fees, and processing costs.<\/p>\n\n\n\n

These hidden fees can add 20 percent or more to a ticket\u2019s price, with some platforms charging an extra USD 30-60 per ticket, plus handling fees. It\u2019s also not necessarily clear by the naming what some fees are even for. <\/p>\n\n\n\n

By waiting until the final step to display the full cost, these platforms take advantage of users’ commitment to the purchase process.<\/p>\n\n\n\n

Mobile games using fake urgency<\/h3>\n\n\n\n

Many mobile games \u2014 such as Candy Crush Saga<\/em> and Clash of Clans<\/em> \u2014 use false urgency to encourage spending. They display limited time offers for in-game items, often with countdown timers suggesting the deal will disappear soon.<\/p>\n\n\n\n

However, when the timer runs out, the same or a nearly identical offer usually appears again. This tactic creates the illusion of scarcity, pressuring players into impulse purchases, even though the offer was never truly limited.<\/p>\n\n\n\n

Laws and regulations governing dark patterns<\/h2>\n\n\n\n
\"Infographic<\/figure>\n\n\n\n

Governments and regulators worldwide have begun taking action against deceptive UX practices and dark patterns in advertising. Regulations are being implemented to enforce stricter rules and protect users from manipulation.<\/p>\n\n\n\n

Several key regulations specifically address dark patterns. We\u2019ll cover these below.<\/p>\n\n\n\n

The General Data Protection Regulation<\/h3>\n\n\n\n

The General Data Protection Regulation (GDPR)<\/a>, enforced in the European Union, requires that user consent for data processing be freely given, specific, informed, and unambiguous. This means companies cannot rely on deceptive tactics to obtain consent, such as pre-checked boxes, vague language, or hidden settings.<\/p>\n\n\n\n

Dark patterns that pressure users into agreeing to data collection are considered a violation of the GDPR and can result in hefty fines. These tactics can include misleading button designs or confusing opt-out options.<\/p>\n\n\n\n

The California Consumer Privacy Act<\/h3>\n\n\n\n

Under the California Consumer Privacy Act (CCPA)<\/a>, companies are required to provide clear and conspicuous notices about their data collection practices and consumer rights. It also mandates that opting out<\/a> of data sales must be as easy as opting in. It seeks to prevent companies from using manipulative designs to make the process confusing or burdensome.<\/p>\n\n\n\n

The California Privacy Rights Act (CPRA)<\/a>, which amends and expands the CCPA, takes a stronger stance against dark patterns. It explicitly states that any interface designed to “subvert or impair” consumer choices regarding privacy rights is unlawful. This includes deceptive UI elements that discourage users from opting out of data collection, or those that make it unnecessarily difficult to delete personal information.<\/p>\n\n\n\n

The California Privacy Protection Agency (CPPA) enforces these regulations and can issue hefty fines<\/a> and penalties for noncompliance.<\/p>\n\n\n\n

The Children\u2019s Online Privacy Protection Act<\/h3>\n\n\n\n

Designed to protect children under 13, the Children\u2019s Online Privacy Protection Act (COPPA) <\/a>prohibits companies from collecting personal information from minors without verifiable parental consent.<\/p>\n\n\n\n

Many dark patterns can violate this law. Examples include nudging children into sharing data, making unintended purchases through deceptive in-app mechanisms, or using manipulative design to encourage excessive screen time.<\/p>\n\n\n\n

Companies that fail to comply with COPPA can face significant fines from the Federal Trade Commission (FTC), which has been increasingly aggressive in enforcing these protections.<\/p>\n\n\n\n

How to avoid dark patterns<\/h2>\n\n\n\n
\"Checklist<\/figure>\n\n\n\n

<\/p>\n\n\nDownload Checklist<\/span><\/a>\n\n\n

With regulations like the GDPR and the CPRA cracking down on deceptive UX practices, businesses need to go beyond bare minimum compliance and actively build trust with their users. Dark patterns might drive short-term gains, but they damage customer relationships, increase customer churn, and can even lead to legal consequences.<\/p>\n\n\n\n

For marketers, designers, and enterprise companies, ethical design can help you avoid fines, but more importantly, it\u2019ll help build long-term engagement, loyalty, and a positive brand reputation.<\/p>\n\n\n\n

Here\u2019s how to keep your UX transparent, fair, and user-friendly.<\/p>\n\n\n\n

Prioritize transparency<\/h3>\n\n\n\n

Transparency is key to maintaining user trust. When users feel informed and in control of their experience, they\u2019re more likely to engage with your brand for the long term. This includes being up front about pricing, data collection, and subscription terms. Incomplete or deceptive information, whether it\u2019s about costs or how data is handled, creates confusion and frustration. This often leads to users feeling manipulated.<\/p>\n\n\n\n

Here are a few ways to prioritize transparency in your UX:<\/p>\n\n\n\n