Build trust, not traps: UX dark patterns and what they really cost you

a mousetrap with cheese on it
Published:

Dark patterns are design choices built into websites, apps, and digital tools that trick or nudge people into doing something they didn’t intend to do. Think of the checkbox that’s already ticked, the subscription that’s easy to start and nearly impossible to cancel, or the pop-up that makes “no thanks” feel like a personal failing. They’re not accidents or oversights. They’re deliberate, and they’re everywhere.

Most businesses using dark patterns aren’t cartoon villains. A lot wouldn’t know they’re doing it as the tactics are baked into platform defaults, borrowed from templates, or copied from bigger players who unfortunately normalised them years ago. But not knowing doesn’t make it okay.

This article discusses the most common dark patterns, explains what they actually are and why they work. We also make the case for why building trust into your design is not just the right thing to do, it’s the much smarter long-term business decision.

What you’ll find here:

What is a dark pattern?

The term was coined by User Experience (UX) designer Harry Brignull in 2010, when he launched darkpatterns.org (now deceptive.design) with the specific goal of naming and cataloguing deceptive interface designs. Brignull’s insight was simple: the design industry had become very good at shaping human behaviour through interfaces, and that expertise was increasingly being used against the people it was supposed to serve.

The name is a play on “design patterns,” the term for repeatable, proven solutions to common interface problems. Dark patterns are the inverse: repeatable, proven tricks that benefit the business at the user’s expense. They’re not accidents. They’re deliberate.

Brignull’s catalogue has since been adopted into law. The EU’s Digital Services Act (DSA), which became fully applicable in February 2024, explicitly prohibits dark patterns in Article 25, stating that online platforms must not “design, organise or operate their online interfaces in a way that deceives or manipulates the recipients of their service.”

“Providers of online platforms shall not design, organise or operate their online interfaces in a way that deceives or manipulates the recipients of their service or in a way that otherwise materially distorts or impairs the ability of the recipients of their service to make free and informed decisions.”

EU Digital Services Act – Article 25: Online interface design and organisation

In Australia, the Australian Competition and Consumer Commission (ACCC) has been raising the alarm since its 2022 Digital Platform Services Inquiry, and further regulation is coming. The Consumer Policy Research Centre’s Duped by Design report is the most thorough Australian survey of dark patterns in the wild, and it makes for uncomfortable reading. It surveyed 2,000 Australians and found that 83% had experienced negative consequences as a result of manipulative design. One in five spent more than they intended. Nearly one in three stopped using the website or app altogether.

The legal definition is still evolving, but the practical one is clear: if your design tricks people into doing something they didn’t mean to do, you’re in this territory.

Some patterns to know and avoid

Pre-ticked boxes

A checkbox that’s already ticked on your behalf, usually for something you’d opt out of if you’d noticed it.

You’ve seen this at checkout: a box is already ticked to sign you up to a mailing list, add travel insurance, or share your details with “trusted partners.” Opting out requires actively noticing and unchecking something that was selected without your input.

If you run an ecommerce store or use a booking platform, check your checkout settings. Many platforms enable pre-ticked newsletter or add-on boxes by default. Using them might grow your list or your revenue in the short term, but the people on the receiving end of those choices didn’t actively make them.

The screenshot above is from a prominent Australian music festival where boxes were pre-ticked to add you to their mailing list at checkout. The 2025 edition went further: unticking the newsletter box prevented the transaction from completing (this is from first hand experience purchasing tickets to an event that was part of the festival). You couldn’t buy a ticket without joining the mailing list. A checkbox implies a choice, which this clearly wasn’t.

Confirmshaming

Writing the “no thanks” option in a way designed to make you feel bad for declining.

Screenshot of an exampe of confirm-shaming with a no option that reads No thanks I want to pay full price

The classic example: a pop-up offering a discount, where the “yes please” button says “I want 20% off!” and the “no thanks” button says “No thanks, I prefer to pay full price.” It’s designed to create a moment of self-doubt that nudges you toward the preferred action.

The fundamental problem is the same regardless of what you’re selling: manipulating someone into joining your mailing list is a strange way to begin what you presumably want to be a long-term relationship. If your offer isn’t compelling enough to earn a yes, the answer is a better offer, not a more humiliating no.

Understanding what your audience actually needs before you design these moments makes a real difference. If you know why people are actually hesitant, you can address that honestly rather than shaming them past it.

Hidden costs

Prices that look attractive until the final checkout screen, where fees, booking charges, or taxes appear for the first time.

The example above is from Dark Patterns Tipline, highlighting the hidden fees in many ticketing transactions.

Live music ticketing is full of hidden costs. As shown in the above screenshot from Dark Patterns Tipline, buying 2 tickets advertised for $240 becomes $306.57 by the time fees and taxes are added at checkout. The customer isn’t necessarily angry at the ticketing platform either – they’re quite likely peeved at the venue or even the artist.

The travel industry is also well practised at this. A flight advertised for $99 quickly becomes $150 by the time seat selection, luggage, a booking fee, and a credit card surcharge are added at checkout. Many major accommodation booking sites show nightly rates that exclude taxes and cleaning fees until the final confirmation screen.

If you use an external booking or ticketing tool, look at what your customers actually see at the point of payment. Where fees appear late in the process, find out if you can surface them earlier, and ideally show the full price including fees right from the start. Transparency here builds trust, even when the total is the same.

Fake urgency and fake scarcity

Countdown timers, “only 2 left!” messages, or “this offer expires in…” prompts that aren’t tied to any real situation.

I’m sure you’ve encountered online courses that “close enrolments” every Sunday and reopen every Monday. The urgency is manufactured and the scarcity is invented. Most people know this by now, and they react with diminished trust in anything that brand communicates.

Real urgency is a completely different thing. Two spots left in a workshop, a print run limited to 50, a sale that ends on Friday: these are valuable signals that help customers make decisions. Ticketing systems that hold your selected seats for eight minutes while you complete checkout are doing the same thing, someone else cannot buy those seats in that window. The test for whether a countdown timer is real is simple: refresh the page. If the timer resets, it’s fake. The ACCC investigated several Australian retailers in 2026 for exactly this after finding around half of the 50 retailers reviewed made concerning claims during Black Friday sales, including countdown timers that claimed a sale was ending when it wasn’t. Three retailers, Michael Hill, MyHouse, and Hairhouse Online, had already paid penalties following a similar sweep the year before.

Under Australian Consumer Law, misleading representations about the duration of a sale or the scarcity of stock can constitute misleading or deceptive conduct, regardless of whether the intention was to deceive. The ACCC has published clear guidelines for businesses on false and misleading claims and they are worth reading before your next sale.

Easy to join, hard to leave

The Eagles wrote a whole song about this.

You can check out any time you like, but you can never leave.

The Eagles, 1976

It’s a great lyric and a terrible business practice.

Audible’s help page on the Android app trying to explain the various ways you can cancel your account, none of which can be done directly from the app.

The textbook example is Adobe, who agreed to a $150 million settlement with the US Department of Justice (DOJ) in March 2026 for hiding termination fees and making cancellation deliberately painful. The Dark Patterns Tipline has documented the Adobe scenario step by step if you want to take a look, and Deceptive.design covers this and many other Adobe examples alongside a broader catalogue of deceptive design patterns.

Adobe is not a small business, but it’s a tool many designers, photographers, and creative professionals in Australia pay for, and most have felt this firsthand. When a brand at Adobe’s scale normalises these practices, it creates a perception that this is just how subscriptions work. It isn’t, and companies with that kind of reach have a responsibility not to use it this way.

Adobe is not alone. Audible, Amazon’s audiobook platform, makes cancellation impossible through its app entirely. You must navigate to the desktop website, work through an account settings maze, and then sit through a retention flow of offers, discounts, and pauses designed to exhaust you into staying.

Another example is The Economist, who offer heavily discounted introductory subscriptions, then auto-renews at the full rate with minimal notice and no self-serve cancellation option. You have to call or email to leave. These are not administrative quirks or UX mistakes. Someone purposely designed the process that way, someone else approved it, and it’s then shipped to every new customer and normalised in the industry.

It’s important to separate this from legitimate subscription terms. Some businesses do need advance notice or commitment cycles to operate. As an example, your local gym may need a month’s notice to manage roster and staffing. These aren’t dark patterns when they’re disclosed clearly upfront at the point of sign-up.

Auto renewal

A renewal reminder email from Dropbox notifying the recipient that their Dropbox Plus subscription will automatically renew on 26 March 2026, with a link to view, download, and print their invoice.
Dropbox notifying Meeum of an upcoming renewal before it happens. Simple, transparent, costs nothing, and maintains trust.

Related to cancellation friction is a pattern that often goes unnoticed until it’s too late: the automatic renewal. You signed up, you forgot, and then a charge lands on your card with no prior warning, no invoice, and no reminder that it was coming.

Dropbox sends a reminder email before your annual renewal hits, which costs them nothing and builds real goodwill. Slido, the audience engagement platform, takes a different approach entirely and requires you to actively re-sign for a second year rather than auto-renewing, which puts the choice back in your hands. The problem is when the commitment is buried in fine print most people won’t read, when the cancellation process is made deliberately difficult, or when the charge simply arrives with no notice at all.

To put it plainly: making it hard to cancel is a dark pattern. Telling people clearly before they sign up that there’s a minimum term, a notice period, or an early exit fee is not.

Obstruction and nagging

Pop-ups, interstitials, or prompts that appear so frequently, or at such poorly chosen moments, that they block people from doing what they came to do.

The “20% off your first order if you join our mailing list” pop-up is a legitimate offer but timing is everything. If it fires the moment someone lands on your page, before they’ve had a chance to see a single product or read a single line of your work, you’re asking them to commit before you’ve given them a reason to. They don’t know yet if they like what you do.

Waiting until someone reaches the end of a page, or triggers an exit intent (meaning their cursor moves toward closing the tab), are both far better moments to ask. The person has had the opportunity to have a good look at what you offer and then make a decision. Once per session is the maximum. A pop-up that reappears every time it’s dismissed, or fires on every page, has crossed from invitation into obstruction.

Social proof fakery

Reviews, testimonials, or trust signals that are manufactured, paid for, or misleading.

Offering incentives for reviews, even without explicitly asking for positive ones, is problematic. When someone receives a $50 Amazon voucher in exchange for leaving a review, the likelihood of that review being critical is close to zero. The incentive doesn’t need to say “five stars please” to produce five stars. Google’s review policies prohibit incentivised reviews outright, and the ACCC’s guidance on online reviews is clear that reviews must reflect genuine unprompted opinions. An incentivised review that doesn’t disclose the incentive can constitute misleading conduct under Australian Consumer Law, regardless of whether the reviewer meant what they wrote.

After doing a small amount of work with a prominent social media agency in Melbourne, we received not one but two review request emails. The first offered an Amazon voucher in exchange for a Google review. The second spent three paragraphs on personal details about the owner’s family, her children’s disabilities, and what each purchase means to them, before arriving at the same ask: leave a review and receive a $50 voucher. Two different emotional strategies, same mechanic, same agency. They didn’t use the word “positive” in either. They didn’t need to. Nobody writes a two star review when a voucher has been offered in return, and nobody wants to feel like they’ve let down a family by declining. We had already decided not to continue working with them due to clear ethical misalignment. It hadn’t been a picnic. These emails confirmed what we already suspected, and we hope they did the same for a few other customers too.

Faking reviews is also increasingly a legal risk. The ACCC identified AI-generated fake reviews growing considerably on certain platforms between 2022 and 2025, and has named fake social proof as an area of active enforcement focus. The ACCC’s guidance on fake reviews makes clear that offering incentives for reviews without disclosure can constitute misleading conduct under Australian Consumer Law.

Real testimonials from real clients are worth far more than a wall of suspicious five-stars. If you have three genuine reviews and you show them with the person’s full name, their business or role, and a link to where the original review lives publicly, that’s more credible than thirty anonymous superlatives. Linking to your Google, Facebook, or Trustpilot profiles and inviting people to read unfiltered feedback is more powerful still, because you’re actively directing people to a place you don’t control.

At Meeum, we show real testimonials from real people and link directly to our testimonial profiles on Google and Facebook where you can read unedited feedback. That’s the standard we’d encourage anyone to aim for.

What dark patterns actually cost you

The business case against dark patterns is simple: they cost more than they make.

They work once, then they don’t. A pre-ticked checkbox adds someone to your list. If they didn’t actively choose to be there, they won’t engage, they’ll damage your sender reputation, and they may mark you as spam. A smaller list of people who want to hear from you is worth more than a large list of people who don’t know how they got there. Small tweaks to how you present choices to users can make a significant difference to how engaged those users actually are.

Word of mouth is your most valuable marketing channel, and dark patterns destroy it. In small business and the creative industries, reputation travels faster than any ad spend. One bad checkout experience shared in an industry Facebook group, a professional community, or even a group chat can reach your entire potential audience overnight.

Regulators are paying attention. The ACCC has named dark patterns as a priority concern. The EU’s Digital Services Act bans them explicitly. The US Department of Justice sued Adobe and named individual executives. This is no longer a hypothetical future risk.

If your product or service is good, you shouldn’t need to trick people into engaging with it.

Design for trust: what to do instead

The antidote to dark patterns is active, intentional design that puts your user’s goals alongside your own. Here’s what that looks like:

Be transparent about costs before checkout. If your booking fee is $4.50, say so on the event listing. Your customers will respect you for it.

Write opt-outs with dignity. “No thanks” is fine. “I’m good for now” is fine. Anything that implies the person is foolish for declining is not.

Make cancelling and unsubscribing easy. One-click unsubscribe in your emails is now a legal requirement under the Spam Act 2003 for Australian senders. Making it easy to leave a membership or subscription is good practice everywhere. People who can leave without friction are far more likely to come back.

Earn your newsletter subscribers. Tell people what they’ll get, how often, and why it’s worth their time, before asking for their address. A list built this way will perform dramatically better than one built through capture.

Use urgency when it’s real. If your workshop really only has two spots left, say so. If your sale really does end on Friday, then say so. When urgency is real, it’s a helpful signal. When it’s manufactured, it’s noise that people learn to ignore.

Time your pop-ups thoughtfully. Exit intent or post-full-scroll are the least intrusive moments to ask. Once per session is the maximum. The goal is to reach someone who’s had a chance to decide whether they’re interested, not to ambush them on arrival.

Let your social proof speak for itself. Use real names, real businesses, and real context where possible. Link to where the original review lives and invite people to read unfiltered feedback. If you want to understand what your audience actually values before you design any of this, starting with genuine research makes every subsequent decision easier.

A quick dark patterns checklist

Before you next review your website, booking flow, or email settings, run through these:

  • Are any newsletter or marketing checkboxes pre-ticked at checkout or sign-up?
  • Do your opt-out buttons treat the person with the same respect as your opt-in buttons?
  • Do all costs appear before the final checkout step?
  • Are any urgency or scarcity messages tied to real situations?
  • Can customers cancel, unsubscribe, or leave easily without needing to contact you?
  • Does your renewal or billing process include clear notice before the charge hits?
  • Are your pop-ups timed so that people have had a chance to see your content first?
  • Are your testimonials real, specific, and linked to verifiable sources?

Good design is trustworthy design

Dark patterns are a shortcut that makes the metric look better while the relationship deteriorates. Every pre-ticked box, every manufactured countdown timer, every buried unsubscribe link is a small withdrawal from an account that took years to build. And unlike a bank account, you often don’t know the balance is gone until the overdraft hits, usually in the form of a bad review, a lost referral, or a community thread you weren’t meant to see.

The good news is that the alternative isn’t complicated. It’s just intentional. Design your website, your checkout, your emails, and your pop-ups as if the person on the other end is someone you’d like to do business with again, because they are.

Accessibility is part of this too: designing so that everyone can use your site clearly and without friction is the same underlying principle applied more broadly. If you want somewhere practical to start, six accessibility improvements you can make right now are a good place. And if you’re not sure whether your site is actually serving your users as well as you think it is, the case for doing real user research first is pretty hard to argue with.

Trust is hard to build and easy to lose. The businesses with the strongest long-term relationships with their customers are the ones who decided early that those customers are worth respecting.

Get expert eyes on your website

Our Website Accessibility, UX, and SEO Audit is a personalised video review that shows you exactly how to make your website easier to find, easier to use, and more accessible.

Whether you're running a small business, community organisation, or creative practice, our audit gives you practical, prioritised recommendations you can act on straight away — no technical background required.

  • SEO: Improve how your site ranks in search engines and AI results
  • Accessibility: Reach more people and meet best-practice standards
  • User experience: Make it easier for visitors to find what they need and take action
  • Audit tiers: Essential, Advanced, and Business — starting from $440 inc. GST
Book your website audit
Avatar for Sam HemphillNow a digital veteran, Sam Hemphill initially trained as a drummer and high school teacher and spent 10 years as a touring musician and tour manager. During that time, he ...

Read more about Sam Hemphill