Dark patterns in financial apps are now a board-level problem

For most of the last three years, dark patterns were an e-commerce story. The Central Consumer Protection Authority notified its Guidelines for Prevention and Regulation of Dark Patterns in November 2023, listed 13 practices, and most of the enforcement that followed was aimed at shopping, travel and ticketing apps. Banks and insurers watched from a distance.

That distance has closed. In April 2026 IRDAI asked insurers selling through digital platforms to check themselves against the CCPA guidelines and report back within 15 days. In May it made the removal of dark patterns one of the parameters that decide the variable pay of an insurer's key management persons. In June the RBI issued directions on responsible business conduct that bring dark patterns into the rules on mis-selling, with effect from 1 January 2027. When a design issue starts to affect the chief executive's bonus, it is no longer a design issue.

The 13, in a financial setting

The CCPA list reads like it was written for online retail: false urgency, basket sneaking, confirm shaming, forced action, subscription traps, interface interference, bait and switch, drip pricing, disguised advertising, nagging, trick questions, SaaS billing and rogue malware. Almost every one has a financial version.

• Basket sneaking is a rider or a card protection plan that arrives pre-ticked with the main product.
• Forced action is a loan journey that will not proceed until the customer agrees to share contacts or accept marketing.
• Confirm shaming is the cancellation screen that asks whether you really want to leave your family unprotected.
• Subscription traps are policies and memberships that take one tap to buy and a branch visit to cancel.
• Drip pricing is the processing fee, the convenience fee and the GST that appear one screen before payment.

None of these needs a malicious designer. They usually arrive one sensible-sounding experiment at a time, each one lifting a conversion metric, until the journey as a whole works against the customer.

The sales page is where firms look for dark patterns. The renewal, claim and cancellation screens are where customers find them.

Where to look first

Most internal reviews start with acquisition: the landing page, the quote, the checkout. That is the part of the journey that marketing and compliance already look at closely. The harder places are the journeys nobody owns end to end: renewal reminders, the cancellation path, the claim status page and the service chat that turns into a cross-sell.

A self-assessment that only covers the buying journey will usually come back clean, and it will be wrong. When IRDAI asked insurers to check themselves, reporting since then suggests almost none reported a problem, and the regulator has since commissioned an independent study of the industry. That is what happens when the people marking the work also wrote it.

What a credible review looks like

A useful review of dark patterns has four properties.

1. It covers every journey, including service, renewal, cancellation and claims, not just buying.
2. It ties each finding to a named pattern and a specific screen, so that the fix can be assigned to someone.
3. It looks below the interface. Some patterns live in default settings, in how a fee is calculated or in what the backend does when a customer cancels.
4. It is repeated. Journeys change every sprint. A review done once is out of date by the next release.

The real fix is a product rule

The lasting fix is not a list of screens to change. It is a rule that the product team holds itself to: any choice that costs the customer money or limits what they can do later must be as easy to see, and as easy to undo, as the choice that earns the firm money. Cancelling should take no more steps than buying. A default that benefits the firm should be one the customer would pick anyway.

Regulators have now given that rule teeth. The firms that treat it as a design principle, and not as a filing deadline, will spend much less time on the next round of reviews.