Skip to content

Glossary Dark patterns

What are dark patterns

Definition

A dark pattern is an interface element built so that the user ends up choosing whatever suits whoever publishes the page, through a deliberate asymmetry between what the design shows and what it hides.

On this page 5
  1. What makes a pattern dark
  2. Where they are regulated today
  3. Why it matters
  4. Good practice
  5. Common mistakes
In brief

A dark pattern pushes the user towards a decision they would not have taken if the same information had been presented neutrally.

What makes a pattern dark

The expression describes a relationship between design and decision, not a closed list of components. A large button does not make a page manipulative, and neither does a genuine countdown. What makes a pattern dark is that the interface distributes effort and visibility unevenly across the available options: accepting costs one click while refusing costs three screens, the final price appears once the payment details have already been entered, the box that activates the subscription comes pre-ticked and its explanation lives in a grey footnote.

Three layers are worth keeping apart, because they are often mixed. Legitimate persuasion sets out a real advantage and leaves the decision untouched. Acceptable pressure recalls a deadline that genuinely exists and can be verified. Manipulation alters the perception of context: it invents scarcity, hides the cost, shames whoever says no, or turns cancellation into an administrative maze.

The boundary is not set by the design team's taste. It follows from two verifiable questions. Is the information relevant to the decision available at the moment of deciding, with visual weight comparable to that of the opposite alternative? Can the option that is less profitable for the company be carried out with effort similar to the more profitable one? When either answer is negative, the design is already taking part of the decision instead of the person.

Where they are regulated today

Regulation (EU) 2022/2065, known as the Digital Services Act, prohibits in Article 25 that providers of online platforms design, organise or operate their interfaces in ways that deceive or manipulate the recipients of the service, or that distort or impair their ability to make free and informed decisions. Recital 67 lists the examples the legislator had in mind: giving one option more visual prominence, repeating a request for a choice already made, and making cancellation harder than sign-up. The obligation has applied to all platforms since 17 February 2024.

That article does not cover the whole field. Its paragraph 2 excludes practices already regulated by Directive 2005/29/EC on unfair commercial practices and by the General Data Protection Regulation, so as to avoid two regimes for the same facts. In practice, an invented scarcity notice is judged as a misleading commercial practice, while a cookie banner with a hidden reject button is judged as invalid consent. The European Data Protection Board has published dedicated guidelines on such designs in social media interfaces, adopted on 14 February 2023.

Supervision is active. A coordinated sweep by the consumer protection cooperation network across 399 online shops, published in January 2023, found at least one of the three practices examined in 148 of them: fake countdowns, interfaces that push towards a purchase or a subscription, and hidden information. The Commission has also announced a Digital Fairness Act for the fourth quarter of 2026, so far without a published legislative text.

Why it matters

The decision that depends on this concept is concrete: which variant gets approved and which gets sent back when a test promises to lift a number. Optimisation teams work with variants, and some of them win because the person makes a mistake. That kind of gain carries a deferred cost that does not appear on the experiment dashboard, and that comes back as returns, cancellations, complaints and, in the European Union, exposure to enforcement.

For a company operating across several markets the risk is not evenly spread either. The same sign-up flow can be unremarkable in one jurisdiction and sanctionable in another, and responsibility falls on whoever publishes the interface, not on the agency or the tool that produced it.

There is also a measurement effect. When design induces clicks that do not reflect intent, conversion metrics stop describing real demand and later decisions rest on contaminated data. A funnel that performs very well and a customer base that leaves early are often the same phenomenon seen from two different reports.

Good practice

  • Run a symmetry test before publishing: accepting, refusing, unsubscribing and cancelling must require a comparable number of steps and a comparable visual hierarchy.
  • Show the total price, including taxes and shipping, on the first screen where the figure influences the decision, and not after collecting personal data.
  • Tie every urgency or stock message to a system value. If the counter does not read a real inventory or a real deadline, remove it.
  • Document the consent flow with dated captures and record which version was active in each period, because the burden of proving compliance falls on the controller.
  • Add a regret metric to the review of every test: returns, cancellations within the first thirty days, and customer service contacts.
  • Submit sign-up, cancellation and automatic renewal flows to legal review before an international rollout, because the assessment depends on the market and on the type of service.

Common mistakes

  • Confusing clarity with manipulation and hiding useful information out of caution. A real advantage explained precisely is not a dark pattern.
  • Copying the flow of a large platform on the assumption that, since it is still online, it has already passed a legal filter.
  • Treating the cookie banner as a design matter rather than a matter of documentary evidence, until a request arrives and there is no record of what was shown.
  • Declaring a variant the winner because of its immediate effect, without observing how that cohort behaves weeks later.
  • Assuming that responsibility passes to the supplier of the template or of the consent management tool.
Manuel Riveiro Rodriguez CEO & Digital Strategist

A technical audit covers this and everything else in one pass.

Request an audit

Frequently asked

Is every urgency technique a dark pattern?

No. A real deadline, verifiable and described accurately, is legitimate information. The problem starts when the counter resets itself, when the offer is still available the next day, or when the number of remaining units comes from no inventory at all. The difference lies in the truth of the value, not in the format of the notice.

Who decides whether a design crosses the line?

Not the design team. Consumer authorities, data protection authorities and digital services coordinators assess it, and ultimately the courts, always on the specific case. That is why it pays to document the flow and to send doubtful points to legal review before publishing them.

Does Article 25 of the Digital Services Act apply to my shop?

That article is addressed to providers of online platforms, meaning services that store and disseminate information provided by third parties. A shop selling its own catalogue usually falls outside that scope and is judged mainly under unfair commercial practices law and data protection law.

Does a badly designed cookie banner count as a dark pattern?

Yes, and it is examined under data protection law. If refusing takes more steps than accepting, or if the reject button is far less visible, the choice is no longer free and the consent is in doubt. The European Data Protection Board describes such cases in detail.

Is it enough to avoid the examples in recital 67?

No. That list is illustrative and does not exhaust the prohibition, which is drafted in general terms about the effect on the decision. A new design that appears in no example can still be manipulative if it distorts the ability to choose freely and with full information.

Sources

  1. Consolidated text of the Digital Services Act, with Article 25 on interface design and recital 67 with the examples.
  2. Guidelines 03/2022 of the European Data Protection Board on deceptive design, adopted on 14 February 2023 in version 2.0.
  3. Commission page on coordinated sweeps, including the January 2023 one with 399 shops reviewed and 148 with findings.
  4. Unfair Commercial Practices Directive, the general framework that still applies to the practices excluded from Article 25.
  5. European Parliament tracking page on the Digital Fairness Act, announced for the fourth quarter of 2026 and still without a proposal.