UCPD dark patterns: confirmshaming, drip pricing, and forced action
Dark patterns map cleanly to specific UCPD articles. Here is the operational version: four patterns, the article they breach, and the enforcement decisions regulators have already issued.
Dark patterns are not a single legal category. They are a collection of UI techniques that, depending on the specific form, breach different articles of the Unfair Commercial Practices Directive 2005/29/EC or fall under Annex I's blacklist. Regulators have stopped treating them as a frontier problem and started treating them as a checklist.
Confirmshaming
The pattern: a modal asks the user to subscribe to the newsletter, and the dismiss button is labelled "No thanks, I prefer to pay full price" or "No, I don't care about exclusive offers".
The article: UCPD Article 6 (misleading actions) and Article 7 (misleading omissions), depending on whether the language presents a false trade-off or merely shames the user. In aggressive cases, Article 8 (aggressive practices) is in scope.
EnforcementItaly, AGCM, 2024: action against a fashion subscription service combining confirmshaming with auto-renewal disclosure failures. 1.2 million euro fine.
Drip pricing
The pattern: the headline price is shown on the product page. Fees, mandatory taxes, shipping, or service charges appear later in the funnel and increase the final total. The visible price never matches the price paid.
The article: UCPD Article 7(4)(c), which requires the price to be made conspicuous including any taxes or, where the nature of the product means the price cannot reasonably be calculated in advance, the manner in which it is calculated. CRD Article 6(1)(e) also applies in pre-contract information.
EnforcementSpain, CNMC, 2023: proceedings against a major OTA for adding mandatory "resort fees" only at the payment step. Settlement involved restitution to affected consumers and a binding commitment to disclose fees upstream.
Forced action
The pattern: to complete a purchase, the user must create an account, accept marketing emails, or share data that is not strictly necessary for the transaction.
The article: UCPD Article 9 (unfair business-to-consumer commercial practices) read alongside GDPR Article 7(4), which provides that consent shall not be considered freely given if the performance of a contract is conditional on consent to processing that is not necessary for the contract.
EnforcementGermany, multiple consumer associations: ongoing series of cease-and-desist actions against major retailers requiring account creation before checkout where a guest checkout would suffice.
Disguised advertising
The pattern: a sponsored product listing in search results, on a category page, or in an editorial-style recommendation block, without a "Sponsored" or "Ad" label.
The article: Annex I(11) of UCPD, which is a blacklisted practice. Per se unlawful. Intent is not required.
EnforcementHungary, GVH, 2023: fine against an online marketplace for unlabelled sponsored search results inside the marketplace. The fine was set as a percentage of the relevant turnover from the affected listings.
How we test thisComplianceGuardHQ does not assume your storefront uses any of these patterns. We map the rendered UI of common funnel steps against the pattern library above and report which checks fail, with the element and surrounding text as evidence. Run a free scan to find out.
Frequently asked questions
Is confirmshaming illegal in the EU?
It breaches UCPD Article 6 (misleading actions) when the dismiss copy presents a false trade-off, and Article 7 (misleading omissions) when it shames the user into action without sufficient information. Italian AGCM has issued a 1.2 million euro fine on this exact pattern in 2024.
What is drip pricing under EU law?
Drip pricing is the practice of advertising a low headline price and adding mandatory fees later in the funnel. UCPD Article 7(4)(c) requires the price to be conspicuous including taxes or, where unknown, the calculation method. CRD Article 6(1)(e) applies the same logic to pre-contract information.
Can I require account creation before checkout in the EU?
Not unconditionally. UCPD Article 9 combined with GDPR Article 7(4) provides that consent to data processing not strictly necessary for the contract cannot be a condition of the contract. Account creation that requires data beyond what is needed for the order is at risk. Multiple German consumer associations have filed cease-and-desist actions on this point.
Do sponsored product listings need to be labelled?
Yes. UCPD Annex I point 11 lists undisclosed advertising as a per-se unlawful practice. Sponsored search results, category listings, and editorial-style recommendations must be clearly labelled ("Sponsored", "Ad", or equivalent in the local language).
What is the maximum fine for a UCPD dark pattern violation?
Up to 4 percent of annual turnover in the relevant member state under Article 13(3) UCPD, as inserted by the Omnibus Directive. Recent decisions sit in the 600,000 to 1.5 million euro range for mid-market operators.
Run the check on your store
ComplianceGuardHQ runs 37 automated checks across 8 EU frameworks against your live storefront in about 60 seconds. Free baseline scan, no install.
Run a Free ScanComplianceGuardHQ runs an automated technical scan. Findings cite the directive text and enforcement precedent. They are not legal advice. Consult a qualified lawyer or Data Protection Officer for binding interpretation in your jurisdiction.