Dark Patterns in India: Consumer Law, Hidden Charges and Consent

The contract the user never intended

A customer opens an application to buy one item. A donation is quietly added at checkout; a subscription renewal requires navigating a confusing cancellation path; the screen warns that only two seats remain when the scarcity is invented. None of these situations necessarily involves a false written contract. The deception may occur through placement, timing, defaults or design.

TheCentral Consumer Protection Authority's Guidelines for Prevention and Regulation of Dark Patterns, 2023address deceptive interface practices that impair consumer autonomy and may amount to misleading advertising, unfair trade practices or violations of consumer rights. The guidelines apply to specified platforms systematically offering goods or services in India, as well as advertisers and sellers, as provided in their scope.

What the regulator actually identifies

The 2023 framework names patterns including false urgency, basket sneaking, confirm shaming, forced action, subscription traps, interface interference, bait and switch, drip pricing, disguised advertisements and nagging, among others. These are not merely design trends. Their common feature is the manipulation of the customer's ability to make an informed, voluntary decision. Read alongside theConsumer Protection Act, 2019, the rules focus on unfair or deceptive methods rather than ordinary commercial persuasion.

A platform can legitimately recommend related goods or offer a discount. The legal issue becomes sharper when it adds charges without meaningful consent, conceals material information until payment or uses misleading scarcity cues. Not every badly designed screen is unlawful; the factual question is whether design subverts or impairs choice in the manner contemplated by the guidelines.

Evidence is the difference

Dark-pattern allegations are often difficult to reconstruct because interfaces change, banners disappear and offers vary between users. A consumer should preserve screenshots or screen recordings showing the full purchase journey, timestamps, the original price, unexpected charges and the steps required for cancellation. Complaint handlers should retain contemporaneous product and interface versions, not only current screenshots.

In 2025 the consumer-affairs authorities also urged businesses to undertake self-audits to identify prohibited patterns. That approach acknowledges that harmful interface design can be systemic rather than an isolated customer-service mistake. Compliance therefore needs product designers, legal advisers, engineers and marketers at the same table.

The 13 categories and the conduct they capture

The notified categories are false urgency, basket sneaking, confirm shaming, forced action, subscription trap, interface interference, bait and switch, drip pricing, disguised advertisement, nagging, trick question, SaaS billing and rogue malware. The 2023 CCPA Guidelines define their scope. The category name helps locate the rule, but the full consumer journey establishes what happened.

Basket sneaking might involve a paid add-on placed in the cart without the intended consent. Drip pricing concerns revealing elements of price at later stages in the manner identified by the guidelines. A subscription trap can arise where cancellation is hidden or made excessively difficult. The same journey may contain more than one pattern.

A genuine stock warning and a fabricated countdown can look alike in a screenshot. The factual distinction is whether the urgency claim is true and substantiated. Similarly, a recommendation is different from an add-on already selected for purchase. Compliance depends on the behaviour the design produces, not its visual style alone.

How to preserve a complaint that can be investigated

Record the path from advertised price to final confirmation, including the account state, device, date and relevant settings. Preserve the invoice and any support correspondence. For a cancellation dispute, show each step attempted and the response received. A single image of the final total may not reveal when the unexpected charge appeared.

Avoid publishing payment-card details, addresses or another person's account data when sharing evidence. The regulator or consumer forum may need supporting records, but a public allegation should not expose information unrelated to the complaint.

A claim for an individual refund or compensation and a request for regulatory action against a widespread practice serve different purposes. The Consumer Protection Act supplies the relevant routes; the category label does not itself determine a damages figure. A useful complaint states the loss, the relief requested and the link between the interface and that loss.

What the 2025 self-audit advisory adds

The CCPA advisory of 5 June 2025 called for platform self-audits. It also recalled the e-commerce rules' requirement for explicit affirmative consent instead of automatically recorded consent or pre-ticked boxes.

An effective audit tests actual production flows, including regional language versions, returning users and mobile cancellation. A legal review of the terms is insufficient if the interface implements a different transaction. The audit should retain before-and-after versions so that a later complaint can be checked against the design the consumer actually saw.

Designing for meaningful consent

A sensible compliance review asks: can the user decline as easily as accept; is the price clear before the final click; are optional services genuinely optional; is cancellation reasonably accessible; and can claims about limited supply be substantiated? Companies should test the real user journey, particularly on mobile screens, rather than relying on a formal checkbox tucked away in their terms.

A checkout flow should leave a reliable record of the transaction the consumer chose. An optional charge added through an obscure default is difficult to defend merely by pointing to a long set of terms.