FTC Enforcement Against Dark Patterns and Deceptive Design
The Federal Trade Commission treats dark patterns — interface designs that manipulate consumers into actions they did not intend — as actionable violations of Section 5 of the FTC Act, which prohibits unfair or deceptive acts and practices. This page covers how the FTC defines dark patterns within its enforcement framework, the mechanisms it uses to pursue violators, the most common scenarios triggering action, and the legal boundaries that determine when a design choice crosses from aggressive marketing into prosecutable deception. Understanding this enforcement landscape matters because penalties can reach tens of millions of dollars per proceeding, and the FTC has signaled sustained priority attention on digital interface manipulation.
Definition and scope
The FTC does not maintain a single codified definition of "dark patterns," but its enforcement actions and published reports treat them as interface or workflow designs that subvert user intent by exploiting cognitive biases, creating false urgency, obscuring cancellation paths, or burying material terms. The agency's September 2022 report, Bringing Dark Patterns to Light, catalogued manipulative design tactics across subscription services, e-commerce checkouts, and privacy consent flows.
Legally, dark patterns fall under the FTC's existing authority in two ways:
- Deceptive practices under Section 5(a) of the FTC Act (15 U.S.C. § 45): a representation, omission, or practice is deceptive when it misleads a reasonable consumer and is material to purchasing decisions.
- Unfair practices under Section 5(n): a practice is unfair when it causes or is likely to cause substantial injury that consumers cannot reasonably avoid and that is not outweighed by countervailing benefits.
Dark patterns also intersect with specific rules. The FTC Negative Option Rule directly governs subscription enrollment and cancellation interfaces. The FTC Section 5 unfair and deceptive acts framework supplies the overarching legal basis for actions not covered by a named rule. The FTC's data security enforcement program captures dark patterns that coerce consumers into surrendering personal data through misleading consent dialogs.
How it works
FTC enforcement against dark patterns proceeds through the same procedural pathways as other Section 5 cases, though the evidentiary emphasis differs because the "deception" is embedded in visual design rather than explicit written claims.
Investigation phase: The FTC's Bureau of Consumer Protection opens an investigation, often triggered by consumer complaints filed through the FTC complaint process or by surveillance of digital markets. Staff may issue Civil Investigative Demands (CIDs) requiring companies to produce interface screenshots, A/B test results, click-through rate data, and internal design documents that reveal intent.
Legal theory construction: Staff must demonstrate that the challenged design would mislead a "reasonable consumer" — a standard applied from the consumer's perspective, not the designer's. Evidence from usability studies, consumer surveys, and recorded user sessions has appeared in FTC filings to establish that a non-trivial percentage of users were misled.
Resolution: Cases resolve through consent orders (consent decrees) or administrative litigation. Consent orders typically mandate redesign of the challenged interface, prohibit specific practices for 20 years, require affirmative disclosures, and impose civil penalties. After AMG Capital Management v. FTC (2021), the FTC lost its ability to seek equitable monetary relief under Section 13(b) directly in federal court; the agency now primarily pursues civil penalties under Section 5(m) for rule violations and seeks monetary redress through Section 19 of the FTC Act via FTC penalties and remedies provisions.
The numbered steps in a standard dark patterns investigation:
- Complaint intake or proactive market monitoring
- Preliminary investigation and evidence preservation
- CID issuance and document production
- Staff recommendation to the Commission
- Proposed consent order negotiation or Part 3 administrative complaint filing
- Final order issuance and compliance monitoring
Common scenarios
Four categories of dark pattern conduct appear most frequently in FTC enforcement actions:
Disguised subscription enrollment ("negative option traps"): Pre-checked boxes or multi-step flows that enroll consumers in recurring billing programs without clear disclosure of the charge. The FTC's action against Amazon in 2023 alleged that the Prime enrollment process used multiple screens designed to obscure the recurring charge and suppress cancellation attempts (FTC v. Amazon.com, Inc., FTC File No. 2123119).
Difficult cancellation flows ("roach motel"): Interfaces where enrollment takes one click but cancellation requires telephone calls, undisclosed waiting periods, or navigation through retention-focused screens. These designs directly violate the FTC Negative Option Rule's requirement that cancellation be at least as simple as enrollment.
Hidden fees and drip pricing: Advertising a base price while concealing mandatory charges until final checkout. The FTC's 2023 proposed Junk Fees Rule targeted this pattern across hotel, ticketing, and short-term rental platforms.
Deceptive interface elements ("confirmshaming" and false urgency): Using emotionally coercive decline language ("No, I don't want to save money") or displaying countdown timers and low-stock warnings that do not reflect real inventory or time constraints. The FTC treats these as material misrepresentations when the stated scarcity is fabricated.
Decision boundaries
Not every friction-inducing or commercially aggressive design is a dark pattern under FTC standards. The agency draws enforcement lines using three primary factors:
Materiality: The challenged design element must affect a decision that a reasonable consumer would regard as important — typically involving money, data, or ongoing contractual commitment. A confusing color scheme on a non-transactional page is unlikely to satisfy this threshold.
Consumer injury vs. consumer inconvenience: Section 5(n) unfairness requires substantial injury. The FTC has distinguished between practices that impose real economic harm (unauthorized charges, data exposure) and practices that are merely annoying. The Bringing Dark Patterns to Light report explicitly frames this as a spectrum, with enforcement priority assigned to patterns that produce verifiable monetary harm.
Intent evidence: While intent is not strictly required to establish deception, internal documents showing that designers A/B tested configurations specifically to maximize accidental enrollments have appeared in FTC complaints as aggravating evidence. Such documents increase the likelihood that the FTC will pursue litigation rather than accept an early consent order without financial penalties.
The contrast between deceptive design (affirmatively misleading the consumer about a material fact) and manipulative design (exploiting behavioral tendencies without a false statement) matters procedurally: deception claims are generally easier to establish because they do not require the full injury-benefit balancing test that unfairness claims demand. Practitioners examining potential exposure under the FTC's broader consumer protection mandate typically evaluate design practices against both prongs simultaneously rather than selecting one theory at the outset.
The FTC's published guidance in the Bringing Dark Patterns to Light report and its ongoing rulemaking through the FTC rulemaking process continue to refine these boundaries, particularly for subscription commerce and digital advertising contexts.