Dark Patterns

In 2022, the Federal Trade Commission filed a complaint alleging that Amazon had spent years designing its Prime cancellation flow to be deliberately confusing. The internal name for the process was "Iliad" — after Homer's epic about a war that dragged on for a decade. To cancel a Prime membership, a subscriber had to navigate through six pages of increasingly urgent warnings, discount offers, and confirmation screens, each designed to make the next click feel like a mistake. The sign-up process took two clicks. The cancellation process took fifteen minutes of cognitive resistance. Amazon did not hide the cancel button. It buried it under layers of friction engineered to exploit the gap between what the user intended and what the interface made easy.

That gap is the operating principle of dark patterns. The term was coined by UX researcher Harry Brignull in 2010 to describe user interface designs that trick people into doing things they did not intend — subscribing to services, sharing personal data, making purchases, consenting to tracking. Brignull's taxonomy identified the core species. Roach motel: easy to get in, nearly impossible to get out — gym memberships with online sign-up and in-person-only cancellation, SaaS subscriptions that require a phone call to a "retention specialist." Confirmshaming: the opt-out option is worded to make the user feel foolish — "No thanks, I don't want to save money" in small grey text below a bright green "Yes, save 40%!" button. Hidden costs: fees that appear only at the final checkout step, after the user has invested time selecting products, entering addresses, and choosing shipping. Bait and switch: the user clicks a button expecting one outcome and gets another — a "close" button that opens an advertisement, a "decline" option that triggers an upsell modal. Forced continuity: a free trial that silently converts to a paid subscription with no reminder, burying the charge in a credit card statement the user won't scrutinise until it's too late.

Dark patterns work because they exploit cognitive biases at the precise moment those biases are most active — the interface layer, where decisions happen fast and attention is shallow. Every dark pattern maps to a known vulnerability. Roach motels exploit loss aversion and the sunk cost fallacy: cancelling feels like losing something you already have. Confirmshaming exploits social proof and identity threat: nobody wants to be the person who "doesn't want to save money." Hidden costs exploit anchoring: the initial price sets expectations, and the fees at checkout feel like additions to a fixed number rather than the actual price. Forced continuity exploits status quo bias: inertia favours the default, and the default is "keep paying."

The scale is not marginal. A 2022 study by researchers at Princeton and the University of Chicago found dark patterns on 11% of the 11,000 shopping websites they analysed. The European Commission reported in 2023 that 97% of the most popular apps and websites in the EU employed at least one dark pattern. Cookie consent banners — where "Accept All" is a bright button and "Manage Preferences" requires navigating a labyrinth of toggle switches across multiple screens — became the most widespread dark pattern in regulatory history, deployed on billions of web pages simultaneously. The interfaces are not broken. They are working exactly as designed.