Brignull's deceptive.design catalogues around a dozen recurring dark-pattern types. The most common: confirmshaming (the opt-out button is phrased to make the user feel bad for declining), sneak-into-basket (items added without clear notice), roach motel (easy to sign up, deliberately hard to cancel), disguised ads (ads styled to look like content), misdirection (visual hierarchy that leads attention away from the user-friendly option), forced continuity (free trial auto-converts to a paid subscription without clear notice).
The 2022 European Data Protection Board report formalised definitions, as did the FTC's September 2022 staff report. Both authorities emphasise user autonomy: patterns that intentionally subvert the user's ability to make an informed choice are the ones that qualify.
Dark patterns are increasingly a legal risk, not just an ethical one. The EU DSA imposes fines up to 6% of global revenue for violations; the FTC can order corrective action and consumer refunds. California, Colorado and Connecticut have state-level dark-pattern provisions in their privacy laws. Beyond the law, dark patterns destroy long-term trust — users who feel tricked churn, leave bad reviews, and tell others.
Audit any flow where business metrics are optimised at the user's expense — checkouts, signup flows, cookie consent, cancellation flows, subscription management, email preferences, and any "are you sure?" pattern. Dark patterns tend to accrete over time as business pressure accumulates on individual flows.
A cancellation flow that requires calling a number, posting a form, and waiting 14 days to confirm — when signup took 90 seconds online — is a roach motel. A cookie banner where "Accept all" is a prominent coloured button and "Reject all" is a text link three clicks away is misdirection and (per EU DSA) illegal.
The ethical test: would the business change the pattern if the user could clearly see what it was designed to do? If the honest answer is "no, because they'd stop converting", the pattern is dark.
Dark patterns intersect with ethics, accessibility (deceptive design disproportionately harms users with cognitive or vision impairments), and conversion optimisation (where business pressure most often leads to them). Related to Nielsen's heuristic 10 (help users recognise, diagnose and recover from errors) — dark patterns often prevent recovery deliberately.
Reviewed 1 October 2026 · Editorial standards