What do you do when you spot a dark pattern (and can we actually force companies to stop)?
You sign up for a free trial, and the cancel button is buried under three menus and a guilt-trip screen ("Are you sure? You'll lose everything!").
Or you try to delete an account only to find the option hidden behind a wall of confusing toggles. Or a countdown timer screams at you that a hotel deal expires in 4 minutes, and it resets the moment you refresh the page.
Dark patterns are everywhere. The question is: does spotting them actually change anything?
What I personally do
When I notice one, I usually:
- Close the app/site and use a competitor
- Occasionally report it, but to whom? That part is always unclear
Can governments force companies to stop? Yes, and it's working, slowly.
Here are real cases where regulatory or public pressure led to consequences:
The FTC ordered Epic Games to refund $245 million to customers after finding that the design layout of Fortnite, characterized by counterintuitive, inconsistent, and confusing button placements, facilitated inadvertent charges with a single button press. Epic also strategically relocated and minimized the "cancel purchase" button and designed a lengthy refund process.
Ireland's Data Protection Commission fined TikTok €345 million in 2023 for using dark patterns to steer minors toward public account settings, breaching the GDPR's requirements for fairness and transparency. It was one of the first major decisions in which a regulator explicitly labeled UX practices as dark patterns in violation of legal standards.
The FTC filed a complaint against Amazon for allegedly misleading consumers into paying for an Amazon Prime subscription, alleging that Amazon had placed significant terms such as auto-renewal at the bottom of the page and made it difficult to cancel the subscription through a long, drawn-out process.
When Meta announced plans to use EU user data to train its AI systems in 2024, critics noted the opt-out process was buried behind misleading email notifications, redirects, and hidden forms. Following mounting regulatory and public pressure, the Irish Data Protection Commission intervened, leading Meta to pause its plans for EU/EEA users. Outside the EU? Meta proceeded as planned.
The FTC required Credit Karma to pay $3 million after they deployed dark patterns to misrepresent that consumers were "pre-approved" for credit card offers. The damages were sent to over 50,000 consumers who were misled.
The "vote with your wallet" instinct feels right but often pointless when the company has no real competition. What do you actually do?