Skip to main content
Consumer & Competition Law

Dark Patterns and Consumer Protection: What E-Commerce Platforms Cannot Do

Dark Patterns and Consumer Protection: What E-Commerce Platforms Cannot Do
CA Nikhil Gupta·July 2026· CCPA Guidelines for Prevention and Regulation of Dark Patterns, 2023 CONSUMER LAW

Reviewed by CA Nikhil Gupta · Last reviewed 17 July 2026

That countdown timer creating urgency, the pre-checked add-on you didn't notice, the subscription that's deliberately harder to cancel than to start — these aren't just aggressive UX design choices anymore. CCPA specifically named and prohibited them.

What a "dark pattern" actually is

CCPA's guidelines define dark patterns as deceptive design practices used by a platform or business to mislead or manipulate consumers into making choices they would not otherwise have made — practices that exploit behavioural psychology to nudge users toward a specific outcome (usually a purchase, a subscription, or sharing more data) rather than simply presenting information neutrally and letting the user decide.

Specifically named and prohibited categories

  • False urgency — creating a misleading sense of urgency or scarcity (fake countdown timers, "only 2 left in stock" claims that aren't genuinely true) to pressure a faster purchase decision.
  • Basket/cart sneaking — adding additional products or services to a consumer's cart without their explicit consent.
  • Confirm shaming — using guilt-inducing or manipulative language to pressure a consumer toward a specific choice (framing an opt-out option with language designed to shame the user for choosing it).
  • Forced action — compelling a consumer to take an unrelated, additional action to complete their original intended action.
  • Subscription traps — making it significantly easier to sign up for a recurring subscription than to cancel it, or failing to provide clear, accessible cancellation mechanisms.
  • Interface interference — designing an interface in a way that misleads consumers into performing unintended actions (obscuring the "decline" or opt-out option visually, for example).
  • Bait and switch — advertising one product/deal to attract a consumer, then presenting a different, often less favourable one.
  • Drip pricing — not revealing the full price upfront, adding additional mandatory charges progressively through the checkout process.
  • Disguised advertisement — presenting paid or sponsored content as if it were organic, unbiased content or a genuine user recommendation.
  • Nagging — persistent, repeated requests/prompts (for permissions, upgrades, or purchases) designed to wear down a consumer's resistance.
⚠ This is a specifically-enumerated list, not a vague general principle: CCPA's guidelines name these dark pattern categories explicitly, giving businesses (and consumers/regulators) a concrete checklist rather than a purely abstract "don't be deceptive" standard — this specificity is deliberate, designed to give the guidelines genuine, actionable enforcement teeth rather than leaving the standard open to extensive interpretive dispute.

Why subscription traps specifically drew regulatory attention

The mismatch between an easy, low-friction sign-up flow and a deliberately difficult, multi-step, or hidden cancellation process for recurring subscriptions has been one of the most consistently criticised consumer-experience patterns globally, not just in India — and CCPA's specific naming of this practice reflects how widespread and consumer-harmful this particular pattern had become across digital subscription services.

Consequences for platforms found using dark patterns

A platform found engaging in these practices can face action from CCPA, including penalties and directions to cease the specific practice — and affected consumers separately retain their usual recourse through consumer complaints for any specific harm suffered as a result (an unwanted charge from a disguised cart addition, for example).

What businesses should actually check in their own UX

Businesses running e-commerce or subscription platforms should audit their own checkout flows, cancellation processes, and marketing presentation specifically against this named list — genuine urgency (an actual, limited-time sale) is not itself prohibited, but manufactured or false urgency is; the guidelines are targeted at deception, not at all persuasive design generally.

Frequently Asked Questions

Is all use of countdown timers or "limited stock" messaging prohibited? ▼
No — the prohibition is specifically on false or misleading urgency/scarcity claims. A genuine, time-limited sale or genuinely limited stock can be communicated to consumers; what's prohibited is fabricating urgency or scarcity that doesn't actually exist, purely to pressure a faster purchase decision.
Do the dark pattern guidelines apply only to e-commerce platforms, or to any business with a website or app? ▼
While much of the guidance and public enforcement attention has focused on e-commerce and digital subscription platforms given where these practices are most prevalent, the underlying prohibition on deceptive design practices is not framed as exclusively limited to e-commerce — any business using digital interfaces to interact with consumers should assess its practices against these principles.
Can a consumer get a refund if they were charged due to a dark pattern like basket sneaking? ▼
Yes — a consumer charged for an item added to their cart without genuine consent (basket sneaking) generally has grounds for a refund and can pursue this both directly with the business and, if unresolved, through a consumer complaint, separate from any broader CCPA enforcement action against the platform's practices generally.

Source and review trail

Use the current official instrument, portal or regulator publication before acting.

Primary category
Consumer & Competition Law
Official starting point
consumeraffairs.nic.in
Home Insights Glossary Editorial Policy Methodology Legal

Home / Insights / Corporate & Company Law
More on Corporate & Company Law
Browse all Corporate & Company Law articles →
Related Articles
SARFAESI Act Explained: How Banks Recover Secured Loans Without Going to Court DRT vs Civil Court: Which Forum Handles Your Loan Recovery Dispute The SARFAESI 60-Day Notice: What Rights a Borrower Actually Has One-Time Settlement (OTS): How Loan Settlement Negotiation Actually Works Guarantor Liability on Loan Default: What a Guarantor Is Actually On the Hook For