"Please make the cancellation flow intentionally hard to understand"—until a few years ago, this was a request that occasionally surfaced in earnest within web production. Burying the account deletion button deep in page hierarchies, highlighting only "Accept" on Cookie banners while rendering "Reject" as a tiny gray link, making the transition from a free trial to a paid plan inconspicuous. These certainly move short-term numbers. But here in 2026, such intentionally inconvenient designs (dark patterns), rather than driving revenue, are becoming liabilities that erode companies across both trust and legal compliance.
One catalyst was an article published by a developer titled Ryanair's Summer Dark Patterns Roundup, which sparked significant discussion on Hacker News. Making "Skip seat selection" difficult to find on seat selection screens, making insurance opt-outs convoluted—visualizing these tactics one by one revealed an unmistakable mood: users notice, and users are angry. From our position building corporate sites and signup forms in client work, this is no distant fire. That is because it is an architectural risk management issue: "When will the friction planted for short-term CV trigger public backlash, regulatory sanctions, or churn?"
Dark patterns mean design that prevents choosing
Dark patterns is an umbrella term for interfaces designed intentionally to make choices users want to make (rejecting, canceling, withholding data) difficult. The European Data Protection Board (EDPB) defines them as designs that steer users toward decisions that are unintended, unwanted, and potentially harmful. Representative examples include the following:
| Variant | Common implementation | User impression |
|---|---|---|
| Visual asymmetry | "Accept" is in a prominent color; "Reject" is a tiny gray link | Hard to reject; feeling coerced |
| Obstacles (added friction) | Cancellation requires phone/chat; account deletion buried deep | Being held back; frustrating |
| Sneak consent | All items checked by default; opt-outs obscured | Deceived; added without permission |
What is critical is that these designs "are hated most when discovered." Users react more strongly to the intent to manipulate them than to the inconvenience itself. Once detected, distrust spreads across the entire website and brand. We addressed how search engines and AI represent a company in Preparing for the Risk of AI Search Misrepresenting Your Company (GH Media), and dark patterns are akin to actively fabricating bad publicity for oneself.
The loopholes are already closed — Japanese regulations
While often dismissed as "something happening overseas," the room for dark patterns to evade scrutiny in Japan is narrowing every year. As practitioners undertaking design in client work, these are essential to grasp.
First is subscription regulation under the Act on Specified Commercial Transactions. With the June 2022 amendments, clearly displaying quantity, pricing, and cancellation terms on the final order confirmation screen became mandatory, making misleading representations subject to corrective orders and penalties. Typical subscription funnels highlighting "First Month Free" prominently while hiding "Subsequent Commitments" in fine print can now fail right at the design review stage.
Second is the External Transmission Regulations under the amended Telecommunications Business Act (effective 2023). When transmitting user data externally via Cookies or similar mechanisms, notifying or publicly disclosing what is sent and where is required. Building a Cookie banner purely as a "tool to force consent" clashes head-on with this rule. For principles on Cookie and session architecture itself, Proper Use of JWTs, localStorage, and Cookies with Authentication Security Audits (GH Media) is also a helpful reference.
Third is the stealth marketing regulations under the Act against Unjustifiable Premiums and Misleading Representations (effective 2023). Representations concealing the fact that content is advertising became subject to regulation. This too tightens the net against deceptive design in a broad sense. The EU goes even further, with the Digital Services Act (DSA) explicitly prohibiting dark patterns. For companies deploying services globally, aligning design assumptions with non-deceptive principles is the safer course.
Flow design that drives growth without deception in client work
Does removing dark patterns cause numbers to drop? In our frontline experience, the opposite is true. In our client work, we take an approach that protects both conversion and retention rates by replacing designs that trap users with friction with designs that retain them through value.
First, audit points where friction generates revenue
The first step is identifying points where users want to say NO, such as cancellation, consent, and opt-outs. For one subscription service client, intentionally complicating the cancellation flow kept churn rates appearing low, but behind the scenes, users who decided never to return and wrote scathing reviews were accumulating. When we rebuilt the cancellation page into a straightforward single screen, short-term cancellations rose slightly, but support complaints and chargebacks decreased noticeably, while reactivations increased. Making it easy to leave directly translates to making it easy to return over the long term.
Build consent symmetrically
For consent regarding Cookies or email delivery, the rule is to make "Accept" and "Reject" visually equal. Place buttons of the same size and prominence side by side, and do not toggle every option on by default. Clearly explain external transmission details. Beyond legal compliance, this serves as a declaration of trust showing that your company hides nothing. Fundamentals on reducing form abandonment are organized in How to Proceed with EFO (Input Form Optimization) (GH Media).
Persuasion is permitted — Drawing the line against manipulation
A common misconception is that eliminating dark patterns means you cannot promote anything. Encouraging retention by honestly highlighting benefits (persuasion) is legitimate; obstructing choice (manipulation) is the problem. Presenting facts on a cancellation screen like "You will lose access to this feature" is persuasion; hiding the cancellation button is manipulation. We articulate this boundary as a design criterion and check it in every review. Much like Rebuilding with HTML-First (GH Media) fixes structures where sluggishness decreases inquiries, our goal here is optimizing trust and retention rather than superficial cosmetic metrics.
Judgments to avoid — "It's fine as long as we don't get caught"
The biggest trap with dark patterns is the assumption that "users won't notice anyway." In reality, users notice, silently leave, and leave negative reviews behind. Furthermore, in an era where AI assistants and comparison sites summarize and broadcast that "this company makes cancellation difficult," concealed friction gets exposed even faster. Risking brand reputation and legal compliance for a few percentage points of short-term CV is simply not worth it.
Another trap is stalling by trying to fix everything at once. A pragmatic approach is prioritizing the highest-risk, highest-traffic flows among cancellation, consent, and opt-out paths.
Summary — From trapping users to earning preference
Designs that prevent cancellation or rejection are no longer competitive advantages; they are sparks for public outrage, regulatory intervention, and user distrust. The Act on Specified Commercial Transactions, the Telecommunications Business Act, and the Premiums and Representations Act have closed legal loopholes, while the EU DSA has banned them outright. From our perspective designing user flows in client work, starting with these three steps is the practical path to balancing trust and performance: auditing high-risk flows (cancellation, consent, opt-outs), building symmetrical consent mechanisms, and articulating the line of "persuasion without manipulation."
If you are concerned about whether your Cookie banners and cancellation flows comply with regulations, or wish to verify if removing dark patterns impacts your metrics, please feel free to reach out via our contact form. We can start with a user flow audit of your existing site.
Sources
- Ryanair dark UX patterns summer 2026 refresher（blog.osull.com）
- Dark Patterns: The Deceptive UX Tactics Now Banned in the EU（Fenti Marketing）
- Dark Patterns in Cookie Consent: How to Avoid Them（CookieYes）
- Regulations on Mail Order (Subscription) Sales under the Act on Specified Commercial Transactions (Consumer Affairs Agency)
- Preparing for the Risk of AI Search Misrepresenting Your Company (GH Media)
- How to Approach Form Input Optimization (EFO) (GH Media)
- Rebuilding with HTML-First (GH Media)
