When "Buy Now" Becomes "Trapped Now": Decoding India's Dark Patterns Guidelines, 2023

 https://drive.google.com/file/d/1rsS19jhb-DH8Y693WfE2pCrPlZIzQdx3/view?usp=sharing

E-commerce convenience often comes wrapped in hidden nudges that manipulate rather than inform. The Central Consumer Protection Authority (CCPA) notified the Guidelines for Prevention and Regulation of Dark Patterns, 2023 on 30 November 2023, exercising powers under Section 18 of the Consumer Protection Act, 2019 (CPA), to curb such manipulative digital design.

What Exactly Is a "Dark Pattern"?

The Guidelines define a dark pattern as any practice or deceptive design using user interface (UI) or user experience (UX) interactions on a platform that is designed to mislead or trick a user into doing something they did not originally intend, thereby subverting consumer autonomy, decision-making or choice. Such conduct amounts to a misleading advertisement, an unfair trade practice, or a violation of consumer rights under the CPA.

Who Must Comply

The Guidelines bind three categories of Covered Entities, and since the CPA governs business-to-consumer transactions, purely business-to-business dealings fall outside their scope.

Covered entity	Meaning
Platforms	Any platform (website or app) systematically offering goods or services in India, including foreign platforms
Advertisers	Persons who design, produce and publish advertisements, by themselves or through others, to promote sale of goods or services
Sellers/service providers	Persons who import, sell, distribute or market a product or service for commercial purposes, including manufacturers

The 13 Recognised Dark Patterns — With Illustrations

Annexure I of the Guidelines lists thirteen specified dark patterns; the CCPA has clarified these illustrations are guidance only and may vary case-to-case.

Dark pattern	Illustration from the Guidelines
False urgency	Falsely showing high "popularity" of a product or claiming stock is "almost sold out" on a booking site to force an immediate purchase
Basket sneaking	Adding a pre-checked INR 1 "donation" checkbox at checkout for movie tickets without the user's consent
Confirm shaming	An airline site prompting "I will stay unsecured" when a user declines to buy travel insurance
Forced action	A wellness website forcing users to subscribe to a newsletter before they can purchase a product.
Subscription trap	Allowing online sign-up but requiring a phone call to customer support to cancel.
Interface interference	A pop-up where "NO" is faint and light-coloured while "YES" is bold and prominent
Bait and switch	Advertising a cheap, quality product, then declaring it "unavailable" at payment and offering a costlier alternative instead
Drip pricing	Charging a flight-ticket price different from the amount displayed at checkout
Disguised advertisement	Publishing a paid skincare-product promotion as ordinary user-generated content without disclosure
Nagging	Sending users repeated notifications urging them to download a mobile app
Trick question	A cancellation pop-up offering "continue" or "cancel" worded so a hurried user selects the wrong option
SaaS billing	Converting a free trial into paid billing without any notification to the user
Rogue malware	A fake pop-up warning of a "virus," inducing the user to download an anti-virus tool that instead installs malware

How the Guidelines Are Enforced

Enforcement operates through two complementary tracks: consumer-driven redress and regulator-driven action.

• Consumer complaints to the District Commission: A consumer who suffers loss due to a dark pattern may seek compensation, and the Covered Entity may be directed to discontinue the unfair trade practice.
• CCPA investigation: Under the CPA, the CCPA can investigate violations of consumer rights, unfair trade practices, or misleading advertisements, triggered on its own motion, on a consumer complaint, or on a government reference.
• Orders on establishing violation: Where the CCPA is satisfied on investigation that there is sufficient evidence, it may order recall of goods, withdrawal of services, reimbursement to purchasers, and discontinuation of the unfair practice.
• Penalty for disobeying a CCPA discontinuance order: Non-compliance is punishable with imprisonment up to six months, a fine up to INR 20 lakh, or both.
• Penalty under Section 89 CPA for misleading advertisements: A first contravention attracts imprisonment up to two years and fine up to INR 10 lakh; subsequent contraventions attract imprisonment up to five years and fine up to INR 50 lakh.
• Sectoral overlap: Disguised advertisements also attract the CCPA's separate Guidelines for Prevention of Misleading Advertisements, 2022, and platform self-audits (as directed in later CCPA advisories to e-commerce entities) supplement statutory enforcement.

Why This Matters for Consumers and Businesses

For businesses, compliance is not cosmetic — it demands re-engineering checkout flows, cancellation journeys, and default settings so that consent is genuinely informed rather than engineered. For consumers, the practical safeguard lies in scrutinising pre-checked boxes, urgency claims, cancellation steps, and final prices before confirming any transaction, and escalating unresolved grievances to the National Consumer Helpline or the competent Consumer Commission.

The Guidelines mark India's alignment with a global regulatory trend against manipulative digital design, but their real test lies in consistent enforcement — turning a notified list of prohibitions into a genuine deterrent against the quiet erosion of consumer choice.