What the FTC Actually Said About Dark Patterns in 2022

What the report is, and what it is not

"Bringing Dark Patterns to Light" is a staff report of the FTC Bureau of Consumer Protection, released on September 15, 2022 and approved by the Commission on a 5-0 vote. The term "dark pattern," coined by the designer Harry Brignull in 2010, describes an interface built to trick or manipulate a user into doing something they would not otherwise choose. The report catalogs how these designs appear across shopping, subscription, and data-collection flows, and states plainly that the agency will pursue them under its existing authority.

It is important to read the document for what it is. A staff report is not a rule and does not itself create new obligations. What it does is set out how the agency intends to apply a law that is already in force, Section 5 of the FTC Act, to the specific design choices it has been seeing. In practice a report like this functions as public notice: it removes the "we did not know" defense and tells businesses which patterns the Commission has decided to treat as unfair or deceptive.

The distinction matters because a later development is often misread as making the whole subject moot. It does not, as the closing section of this article explains.

The four tactics the report names

The report organizes its examples around four recurring problem areas. Each maps to a concrete part of a commercial website, which is what makes the document useful rather than abstract.

Where the taxonomy comes from

The report's categories are not invented from nothing. They draw directly on the academic work that first measured dark patterns at scale. In 2019 a Princeton research team, Arunesh Mathur and colleagues, published "Dark Patterns at Scale," an automated and manual crawl of roughly 53,000 product pages across about 11,000 shopping websites.

That study found 1,818 distinct dark-pattern instances spanning 15 types across 7 categories, present on roughly 1,254 of the sites crawled, about 11 percent of the sample. It also documented 22 third-party vendors selling dark-pattern functionality as a turnkey service, evidence that the practice is an industry, not a set of one-off accidents. When the FTC built its four-tactic frame, it was standing on this peer-reviewed foundation, which is why the report reads as a description of measured reality rather than a list of hypotheticals.

What Section 5 liability actually means here

Section 5 of the FTC Act prohibits "unfair or deceptive acts or practices" in commerce. The 2022 report's central move is to say that a design choice, not just a false statement, can be the deceptive or unfair act. A checkout that hides a fee until the last screen can be deceptive even if no sentence on the page is literally false, because the arrangement of the interface is what misleads.

For a small business the practical reading is narrow and specific. You do not need to audit your entire website against a vague standard. You need to look at the exact places where the four named tactics live: how you disclose that content is an ad, how a customer cancels a recurring charge, when total price becomes visible, and how you ask for personal data. Those are the surfaces the report tells you the agency is watching.

The checkout and cancellation flow are the exposure

Two of the four tactics, obstructed cancellation and buried junk fees, sit squarely inside the two flows that almost every commercial site has: the path to buy and the path to leave. That concentration is the report's most actionable message for an owner-operated business.

It also reframes conversion work. A founder tempted to add a fake countdown timer, a pre-checked add-on, a hidden fee, or a cancellation dead-end is not choosing between an aggressive tactic and a mild one. They are choosing whether the checkout is a growth surface or a legal-exposure surface. The honest version of the funnel, clear pricing shown early, a cancellation path as easy as sign-up, labeled advertising, and data requests limited to what the transaction needs, is the same version that survives an FTC reading. Honest conversion and compliant conversion turn out to be the same build.

Click-to-cancel is vacated, but the obligation is not

The most common misreading of this subject in 2026 is that the FTC lost. In 2024 the agency finalized a "click-to-cancel" Negative Option Rule that would have codified much of the cancellation guidance. On July 8, 2025 the Eighth Circuit Court of Appeals vacated that rule. It is essential to read why: the court struck it down on a procedural ground, that the agency had failed to complete a required preliminary cost-benefit analysis, not on a finding that obstructed cancellation is lawful.

The underlying law is untouched. The Restore Online Shoppers' Confidence Act, state auto-renewal statutes, and Section 5 itself all remain fully in force, and the FTC opened a new rulemaking on the subject in early 2026. The named "click-to-cancel rule" is currently gone; the obligation to offer honest, symmetric cancellation is not. A business that read the 2025 vacatur as permission to bury its cancellation flow would be reading it exactly backwards.

This is time-sensitive regulatory content. The status above reflects the position as of the review date at the top of this article, and a reader making a compliance decision should confirm the current state of the rulemaking before acting.

How to read the report

A careful reading avoids two errors. The first is dismissal, treating a staff report as toothless because it is not a rule; the report tells you where enforcement attention has moved, and enforcement runs on the statute, not the report. The second is panic, treating every persuasive element on a website as a dark pattern; legitimate scarcity, real social proof, and clear urgency are not what the FTC named. The line the report draws is between honest design and design built to trick, and that line is legible.

For most small businesses the correct response is a design review of four specific surfaces, done by someone who can tell the difference between a persuasive checkout and a deceptive one. That review is inexpensive, it protects the two flows that carry your revenue, and it usually improves conversion at the same time, because the friction the FTC treats as unfair is the same friction that makes buyers leave.