That countdown timer creating urgency, the pre-checked add-on you didn't notice, the subscription that's deliberately harder to cancel than to start — these aren't just aggressive UX design choices anymore. CCPA specifically named and prohibited them.
What a "dark pattern" actually is
CCPA's guidelines define dark patterns as deceptive design practices used by a platform or business to mislead or manipulate consumers into making choices they would not otherwise have made — practices that exploit behavioural psychology to nudge users toward a specific outcome (usually a purchase, a subscription, or sharing more data) rather than simply presenting information neutrally and letting the user decide.
Specifically named and prohibited categories
- False urgency — creating a misleading sense of urgency or scarcity (fake countdown timers, "only 2 left in stock" claims that aren't genuinely true) to pressure a faster purchase decision.
- Basket/cart sneaking — adding additional products or services to a consumer's cart without their explicit consent.
- Confirm shaming — using guilt-inducing or manipulative language to pressure a consumer toward a specific choice (framing an opt-out option with language designed to shame the user for choosing it).
- Forced action — compelling a consumer to take an unrelated, additional action to complete their original intended action.
- Subscription traps — making it significantly easier to sign up for a recurring subscription than to cancel it, or failing to provide clear, accessible cancellation mechanisms.
- Interface interference — designing an interface in a way that misleads consumers into performing unintended actions (obscuring the "decline" or opt-out option visually, for example).
- Bait and switch — advertising one product/deal to attract a consumer, then presenting a different, often less favourable one.
- Drip pricing — not revealing the full price upfront, adding additional mandatory charges progressively through the checkout process.
- Disguised advertisement — presenting paid or sponsored content as if it were organic, unbiased content or a genuine user recommendation.
- Nagging — persistent, repeated requests/prompts (for permissions, upgrades, or purchases) designed to wear down a consumer's resistance.
⚠ This is a specifically-enumerated list, not a vague general principle: CCPA's guidelines name these dark pattern categories explicitly, giving businesses (and consumers/regulators) a concrete checklist rather than a purely abstract "don't be deceptive" standard — this specificity is deliberate, designed to give the guidelines genuine, actionable enforcement teeth rather than leaving the standard open to extensive interpretive dispute.
Why subscription traps specifically drew regulatory attention
The mismatch between an easy, low-friction sign-up flow and a deliberately difficult, multi-step, or hidden cancellation process for recurring subscriptions has been one of the most consistently criticised consumer-experience patterns globally, not just in India — and CCPA's specific naming of this practice reflects how widespread and consumer-harmful this particular pattern had become across digital subscription services.
Consequences for platforms found using dark patterns
A platform found engaging in these practices can face action from CCPA, including penalties and directions to cease the specific practice — and affected consumers separately retain their usual recourse through consumer complaints for any specific harm suffered as a result (an unwanted charge from a disguised cart addition, for example).
What businesses should actually check in their own UX
Businesses running e-commerce or subscription platforms should audit their own checkout flows, cancellation processes, and marketing presentation specifically against this named list — genuine urgency (an actual, limited-time sale) is not itself prohibited, but manufactured or false urgency is; the guidelines are targeted at deception, not at all persuasive design generally.
Frequently Asked Questions
Is all use of countdown timers or "limited stock" messaging prohibited? ▼
No — the prohibition is specifically on false or misleading urgency/scarcity claims. A genuine, time-limited sale or genuinely limited stock can be communicated to consumers; what's prohibited is fabricating urgency or scarcity that doesn't actually exist, purely to pressure a faster purchase decision.
Do the dark pattern guidelines apply only to e-commerce platforms, or to any business with a website or app? ▼
While much of the guidance and public enforcement attention has focused on e-commerce and digital subscription platforms given where these practices are most prevalent, the underlying prohibition on deceptive design practices is not framed as exclusively limited to e-commerce — any business using digital interfaces to interact with consumers should assess its practices against these principles.
Can a consumer get a refund if they were charged due to a dark pattern like basket sneaking? ▼
Yes — a consumer charged for an item added to their cart without genuine consent (basket sneaking) generally has grounds for a refund and can pursue this both directly with the business and, if unresolved, through a consumer complaint, separate from any broader CCPA enforcement action against the platform's practices generally.