booting
imelabs
← the notebook
paper · jun 2026

dark patterns: who uses them, why they work, and what to do instead

a field guide to deceptive design. the named cases (amazon, epic, match, intuit, vonage), the psychology they exploit, the cost to users and society, the law catching up, and how to get every result a dark pattern chases without the damage.


a dark pattern is an interface built to get you to do something you would not have done if you had seen it clearly. not a confusing design, a deliberate one. the confusion is the product.

the term is fifteen years old. in 2010 a british ux researcher, harry brignull, registered a site to name and catalogue the trick, deceptive.design (then darkpatterns.org), and wrote up the first dozen types. he later collected the field in a 2023 book, deceptive patterns. the names he gave the patterns, roach motel, confirmshaming, sneak into basket, are now in regulators' mouths and in court filings.

the line between a nudge and a dark pattern

both use the same psychology. the difference is who the design serves. a nudge helps you do the thing you already wanted; a dark pattern steers you somewhere that pays the designer at your expense. brignull's test is the cleanest one going: would the user thank you for the design if they understood exactly what it was doing? if yes, it is a nudge. if no, it is a dark pattern. everything below fails that test.

the catalogue, in brief

you need the vocabulary, so here is the short version. the patterns that come up again and again:

  • roach motel. easy to get into, hard to get out of. one-click signup, a cancellation maze.
  • hidden costs / drip pricing. a low headline price that grows with unavoidable fees revealed one screen at a time, usually after you are committed.
  • sneak into basket. an add-on slipped into your cart by a pre-ticked box or a side path, with no explicit add.
  • forced continuity. a free trial that converts to paid silently, often with card details taken up front and no reminder.
  • confirmshaming. guilting you out of the safe choice. "no thanks, i don't want to save money."
  • trick questions. a form worded, often with a double negative, so the quick reading is the opposite of the real one.
  • privacy zuckering. nudging you into sharing more than you meant to, with the private option buried.
  • fake scarcity and fake social proof. "only 2 left", "14 people are looking at this", "sarah just bought one", where the numbers are invented.
  • obstruction and nagging. burying the exit, and asking again and again until you cave.

most of these are everywhere. a 2019 crawl of 11,000 shopping sites by researchers at princeton found these tricks at scale, with low-stock messages, countdown timers and activity notifications among the most common.

why they work: the psychology

dark patterns are not magic. they are behavioural economics pointed at the user instead of for them. the mechanisms are well documented, which is exactly how designers know to reach for them.

system 1 over system 2. kahneman's two-speed model: system 1 is fast, automatic, emotional; system 2 is slow and deliberate. dark patterns are built to keep you in system 1, deciding on reflex before the careful part of your brain catches up. urgency, default buttons and visual misdirection all do this.

loss aversion. we feel a loss more sharply than an equivalent gain (kahneman and tversky). a countdown timer reframes "do nothing" as "lose the deal", which is far more motivating than the gain ever was. it is also why a subscription is hard to give up once you have it: cancelling registers as a loss.

the default effect. most people accept whatever is pre-selected (samuelson and zeckhauser called it status quo bias). a pre-ticked add-on, an opt-out buried in settings, an auto-renew left on, all lean on the fact that the effort to change exceeds most people's motivation to bother.

scarcity and social proof. cialdini's classics. limited supply and "everyone's doing it" both short-circuit judgement, which is fine when true and a lie when fabricated.

cognitive load as a weapon. make the cancellation path long and confusing enough and a tired user gives up. this is sludge, the term thaler and sunstein use for friction deliberately added to a process. a dark pattern is sludge installed on purpose, raising the search cost, the evaluation cost, and the plain psychological cost of doing what you came to do.

reciprocity and sunk cost. hand over your card for a "free" trial and a quiet obligation forms; keep paying for a thing you no longer use because you have already sunk months into it. b.j. fogg's behaviour model (behaviour happens when motivation, ability and a prompt line up) and nir eyal's "hooked" loops describe how habit-forming products are engineered. turned cynical, the same engineering becomes compulsion by design.

none of this is fringe knowledge. it is the standard toolkit, and the only real question is whether it is aimed at helping you decide or at stopping you from deciding.

who does what: the named cases

the abstract version is easy to wave away. here is the documented version, from regulators and courts.

amazon, the cancellation maze

in september 2025, amazon settled with the us federal trade commission for $2.5 billion over amazon prime: a $1 billion civil penalty, the largest ever for an ftc rule violation, and $1.5 billion in refunds to about 35 million people. the ftc's case, filed in 2023, was a dark-patterns case in all but name. on the way in, checkout buttons pushed prime as the default and did not make clear that completing the purchase also enrolled you in a recurring subscription. on the way out, cancellation ran through a flow amazon internally nicknamed "iliad", after homer's epic, because leaving took that long: clicking "end membership" did not end the membership, it began a multi-step path that asked you to confirm your decision again and again. internal messages aired in the case described subscription practices as "a bit of a shady world" and unwanted enrolments as "an unspoken cancer". the settlement named two senior executives personally. amazon admitted no wrongdoing, and is now required to show a plain decline button and to make cancelling as easy as signing up.

epic games, the accidental purchase

in december 2022 epic games, maker of fortnite, settled with the ftc for $520 million: $275 million for children's-privacy violations and $245 million in refunds for dark patterns in its billing. the ftc found fortnite's button layout "counterintuitive, inconsistent, and confusing" to the point that players were charged for things they never meant to buy, by a single press while the game was loading or waking from sleep. children ran up charges with no parental consent. and when customers disputed charges with their banks, epic locked them out of accounts and the content they had already paid for. the detail that says everything: an epic designer testified that the refund link was deliberately placed in an obscure spot to "obfuscate the existence of the feature", that not a single player found it in testing, and that when he asked whether to make it easier to find he was told it was "perfect where it is at". the company had received more than a million complaints. by mid-2025 the ftc had paid out close to $200 million in refunds.

match group, the fake admirer

in august 2025 match group, owner of match.com, tinder, hinge, okcupid and plenty of fish, settled an ftc case for $14 million. the complaint, filed in 2019, alleged that match lured non-paying users into subscriptions with notifications that someone liked them, when many of those messages came from accounts match had already flagged as fraudulent. it promoted a "six-month guarantee" of free extra time while hiding the conditions that made it nearly impossible to claim. its cancellation flow was described in an internal presentation as "hard to find, tedious, and confusing". and it locked subscribers out when they disputed charges. match admitted no liability. (separately, a 2024 consumer lawsuit alleges tinder and hinge are deliberately engineered to be addictive rather than to help people find a match and leave; match calls the claim meritless. that one is unresolved, and worth treating as an allegation, not a finding.)

intuit and vonage, the others

intuit ran years of advertising for "free" turbotax filing, some of it consisting of little more than the word "free" repeated, when a large share of filers could not actually file for nothing. the ftc found the campaign deceptive, a textbook bait-and-switch, and ordered intuit to stop. vonage, the internet phone company, was ordered by the ftc in 2022 to refund nearly $100 million for junk fees and for making cancellation deliberately hard.

the ones you meet every day

the named cases are the visible tip. the patterns themselves are near-universal. the cookie banner where "accept all" is a bright button and "reject all" is hidden two clicks deep. the flight or concert ticket whose price doubles in fees by the final screen. the news subscription that takes thirty seconds to start and a phone call to stop. the "are you sure you want to lose your benefits?" guilt trip standing between you and the downgrade button. you have been steered by all of them this week.

the damage: to users, and to everyone

direct financial harm, concentrated on the vulnerable. the people least equipped to spot a trick are the ones it costs most: children, the elderly, people with low digital literacy, people reading in a second language, anyone tired or distracted. epic's case was about children. amazon's was about millions who never realised they were paying. a dark pattern is a regressive tax on attention.

erosion of autonomy and trust. the deeper cost is not the money, it is the corrosion. every fabricated countdown and buried unsubscribe teaches people that interfaces lie, so they stop trusting all of them, including the honest ones. that mistrust is a cost the whole web pays, charged to companies that never deceived anyone.

a race to the bottom. this is the part that should worry anyone who builds. when a dark pattern lifts a competitor's conversion or retention, the pressure is on everyone else to match it. deception becomes table stakes, and the honest operator is competitively punished for honesty. it is a market for lemons: bad practice drives out good, not because users want it, but because the metrics reward it in the short term. left alone, the floor keeps dropping.

the backlash lands on everyone. the inevitable response to a race to the bottom is regulation, and regulation is blunt. the compliance burden of the rules now arriving falls on every business, the scrupulous included, because a minority would not stop on their own.

the law caught up

for a long time dark patterns lived in a grey area. that era is closing.

the ftc named the problem directly in a 2022 report, bringing dark patterns to light, and has been bringing the cases above ever since. in october 2024 it finalised a "click-to-cancel" rule (formally, an update to the negative option rule) requiring that cancelling a subscription be as easy as starting one. a federal appeals court, the eighth circuit, vacated that rule in july 2025, but on a procedural technicality, not on the merits, and the court was explicit that it was not endorsing deceptive practice. the ftc moved to reissue it in early 2026. and crucially, the rule was never the only thing in force: the restore online shoppers' confidence act (rosca) already requires clear disclosure, real consent and simple cancellation for online subscriptions, with civil penalties per violation, and a patchwork of state laws (california, new york and others) say much the same. section 5 of the ftc act covers deception and unfairness generally. the ftc has also finalised a rule against drip pricing in live-event ticketing and hotels, forcing all-in prices up front.

in europe the direction is the same and in places sharper. the digital services act explicitly prohibits dark patterns on online platforms, and the gdpr governs the consent banners, which is why "reject all" is, slowly, starting to appear next to "accept all".

the through-line: manipulative design has moved from a ux argument to a legal and financial liability. when the penalties run to billions and name executives personally, "it lifted conversion" stops being a defence.

how to get the same result, without the damage

here is the part that matters if you build things. every dark pattern is chasing a legitimate business goal. the goal is fine. the method is the problem, and in almost every case the honest method gets you the same result more durably. the dishonest version borrows growth from the future and pays it back with interest, in churn, chargebacks, brand damage and, increasingly, fines.

a translation table, manipulative goal to honest pattern:

  • want retention? make leaving easy. counterintuitive, and true. a one-click cancel lowers the anxiety that stops people signing up in the first place, and "easy to leave" is something people tell their friends. the roach motel buys you a few extra months of resentful subscribers and a reputation you cannot undo. amazon is now legally required to do the easy version; you can simply choose it.
  • want sign-ups? ask honestly. clear value, plain terms, no pre-ticked boxes, affirmative opt-in. consent you actually obtained is consent you do not later refund at $1.5 billion.
  • want urgency? only the real kind. a genuine deadline or a true low-stock number converts perfectly well and costs you nothing in trust. a fabricated one is a lie with a timer on it, and customers increasingly know the difference.
  • want upsells? make them clear and declinable. a relevant add-on, plainly offered, with an obvious "no", will outperform the sneak-into-basket version once you count the returns and the complaints.
  • fewer refund requests? make the refund path findable. this is the epic lesson stated plainly. hiding the cancel or refund button does not reduce refunds, it converts them into chargebacks, one-star reviews and a regulator's attention. friction does not remove the demand, it just routes it somewhere worse.
  • pricing? show the total up front. all-in pricing means fewer carts abandoned at the final screen out of anger, and it is now the law in more places than not. the honest number is also the higher-trust number.
  • consent and cookies? make the choices symmetrical. "reject all" as easy as "accept all", in plain language. you will collect less spurious consent and carry far less legal risk.
  • notifications? earn the permission. ask once, deliver something worth having, and stop. nagging trains people to ignore you, and then to leave.

the unifying principle is brignull's test run forward: design for the user's actual goal, and let the business goal follow from the trust you build. the durable form of every dark pattern's objective is a customer who trusts you, and you cannot trick your way to that.

and the economics now agree with the ethics. for years the excuse was that dark patterns simply work, that fair design is a luxury. the penalties above, billions of pounds and dollars, plus the brand wreckage and the named executives, have made manipulation the expensive choice and trust the cheap one. doing the honest thing was always right. it is now also the lower-risk business decision.

that is the whole argument for building the honest version, which is the only version we build.

planning something and want it built so it earns its conversions instead of stealing them? start here. related reading: own it, don't rent it and the £0 site myth.

hey, i'm pebble. the imelabs chatbot. wiring me up properly soon, for now i just watch the cursor.