What Are Dark Patterns?
Updated 24 October 2026
Jump to section
Dark patterns are interface tricks that push people into choices they would not otherwise make. UX designer Harry Brignull coined the term in 2010, and now more often calls them "deceptive patterns". They include hidden costs at checkout, fake countdown timers, pre-ticked boxes, and signups that are hard to cancel. The short-term win is a higher number; the cost is lost trust, and, increasingly, a regulator's attention.
How do dark patterns work?
Dark patterns work by exploiting how people actually read a screen: quickly, trusting defaults, and looking for the fast path. A deceptive design puts the choice that helps the business on that fast path, and hides or friction-loads the choice that helps you.
The manipulation is rarely a lie. It is a nudge, a default, or a layout that steers the eye. That is what makes it hard to spot and easy to defend as "just design".
Brignull's catalog of deceptive patterns groups the common ones. A few show up on Malaysian sites often.
| Pattern | What it does |
|---|---|
| Hidden costs | Fees appear only at the final checkout step |
| Fake urgency | A countdown or deadline that is not real |
| Fake scarcity | "Only a few left" when stock is not really limited |
| Confirmshaming | A decline button worded to guilt you ("No, I hate saving money") |
| Hard to cancel | Signup takes one click; canceling takes a phone call |
| Sneaking | An extra item or subscription slipped into the cart |
| Preselection | The option that suits the business is ticked by default |
Type names and definitions from Brignull's deceptive.design taxonomy; examples are illustrative.
Why do businesses use them, and why does it backfire?
Businesses use dark patterns because they move a metric in the short term. A pre-ticked upsell in an online store lifts average order value. A hard-to-cancel flow keeps a subscriber one more month. On a dashboard, it looks like a win.
It backfires because the win is borrowed against trust. A customer who feels tricked at checkout remembers it, disputes the charge, or never returns. Forced subscriptions turn into chargebacks and one-star reviews.
A pattern we repeatedly see is an owner judging a site by how it looks or by one metric, not by what it earns over time. A trick that bumps a number this week can quietly raise refunds and complaints next month, which is the opposite of building trust that converts.
There is also a plainer reason to avoid them. The regulation is tightening.
Are dark patterns illegal?
Dark patterns are increasingly regulated, though Malaysia has no law that names them directly. Where you sell or who you sell to decides which rules apply.
In the European Union, the Digital Services Act bans deceptive interface design under Article 25, which stops online platforms from designing interfaces that deceive or manipulate users. It has applied since 17 February 2024, but only to online platforms such as marketplaces and social networks, not to an ordinary business website.
A Malaysian site selling to EU consumers is more likely to meet the EU's Unfair Commercial Practices Directive. It already bans tricks such as falsely claiming a product is available for a very limited time.
In the United States, the Federal Trade Commission published a 2022 staff report, Bringing Dark Patterns to Light. It describes them as design practices that trick or manipulate users into decisions they would not otherwise make. California goes further: under its privacy law, consent obtained through a dark pattern does not count as consent at all.
In Malaysia, there is no dark-patterns statute, but the Consumer Protection Act 1999 prohibits misleading and deceptive conduct in trade under Part II. A checkout that hides a compulsory fee can fall under that general prohibition. So can a fake "only 2 left" stock warning, since section 9 covers misleading claims about availability or quantity, even without a law using the word "dark pattern".
Online sellers carry a more specific duty too. Malaysia's 2024 e-commerce regulations require the full price, including delivery and tax, to be shown before the customer buys.
How do you keep them off your own site?
You keep dark patterns off your site by making the honest choice the easy choice. Show the full price, including delivery and fees, before the final step. Make a "decline" as easy to click as an "accept".
Keep your calls to action clear about what happens next, so a button says what it does. Leave optional add-ons unticked, and let people opt in. Make canceling as simple as signing up.
The test is simple. Would the design still work if you explained it out loud to the customer's face? If the honest explanation would make them hesitate, the design is doing the hesitating for them.
Good user experience and honest design point the same way. A site that respects the reader tends to convert better over time than one that ambushes them.
Frequently asked questions
Is a countdown timer always a dark pattern?
No, a countdown timer is only a dark pattern when it lies. A genuine, time-limited sale with a real deadline is honest urgency, and stating it is fine. It becomes deceptive when the timer resets on refresh, restarts for every visitor, or counts down to nothing in particular. The line is whether the scarcity is real or manufactured to rush a decision.
Are cookie banners dark patterns?
They can be, depending on how they are built. A banner that makes "accept all" a big bright button while hiding "reject" behind extra clicks is a recognized deceptive pattern. A balanced banner with equal, clear choices is not. In Malaysia, cookie-consent rules are lighter than Europe's, but the honest-design principle still applies to how you ask.
Do dark patterns actually hurt my business?
Yes, over any period longer than a quick campaign. They lift a short-term metric while raising refunds, chargebacks, disputes, and negative reviews, which cost more than the trick earned. They also erode the repeat business and word of mouth that carry a small business. A one-time gain paid for with a customer's trust is a poor trade.
Is "confirmshaming" really a problem, or just marketing?
Confirmshaming is a recognized deceptive pattern, not clever copy. It is the tactic of wording a decline option to shame the user, such as "No thanks, I don't want to grow my business". It manipulates through guilt rather than reason. It also reads as smug, and many customers who click through anyway remember the tone.
Where can I learn the full list of dark patterns?
Harry Brignull's deceptive.design site keeps the working catalog of types, from hidden costs to hard-to-cancel flows. Its terminology has been adopted in laws such as the EU's Digital Services Act and California's privacy rules. For your own site, you do not need to memorize the list. Applying one rule, make the honest choice the easy choice, avoids almost all of them.
Designing sites that persuade without tricking
Storming Solutions builds custom-coded websites and runs SEO, AEO, and GEO for Malaysian businesses from Kuala Lumpur, and we design to persuade with clarity, not with traps. A site can be convincing and honest at the same time; the honest one lasts longer.
Our stance: any tactic that would embarrass you if a customer noticed it is a liability, not a feature, so we leave it out.
Want a site that converts by being clear rather than by cornering people? Message us on WhatsApp or see how we work on our web development service page.