On this page
- Core sub-patterns
- Roach Motel
- Forced Continuity / Free Trial Trap
- Confirmshaming
- Subscribe & Save Pre-Selection
- Skip Window Trap
- Ghost Subscription
- Ambiguous Confirmation
- Cancellation Interstitial Hell
- Benchmarks (as-of 2025–2026)
- Regulatory landscape
- United States
- United Kingdom
- European Union
- What practitioners report
- Key terms
- Contradictions
- Gaps
- Next frontier (dangling links created by this page)
Subscription Traps
Subscription Traps
Subscription traps are deceptive commercial practices where consumers are unknowingly enrolled in recurring billing, find cancellation intentionally difficult, or experience silent conversion from free trials to paid subscriptions. The US regulatory term is negative option billing (the consumer's failure to act = consent to continue being charged). The EU regulatory framing uses "subscription dark patterns" and "subscription cancellation traps."
The subscription economy tripled in size between 2017 and 2024, and the scale of harm has grown with it: 69% of EU consumers have experienced difficulty cancelling an online subscription; 4.7 million UK adults are actively paying for a subscription they did not knowingly sign up for (as-of 2025). (European Commission Digital Fairness Act Fitness Check, 2025; National Trading Standards, 2025)
Core sub-patterns
The research literature and practitioner community use consistent vocabulary for specific sub-patterns within subscription traps.
Roach Motel
Easy to subscribe, intentionally difficult or impossible to cancel. Named after the US roach trap slogan ("you can check in, but you can't check out"). An ACM CHI 2024 study of popular news websites across four countries found cancellation flows that "feature intentional barriers, such as forcing users to type in a phrase or call a representative," and that "many subscription flows do not adequately inform users about recurring charges." (Sheil et al., "Staying at the Roach Motel," CHI 2024, arxiv.org/abs/2309.17145)
The most extreme documented case is Amazon Prime's internal "Iliad Flow" — a 4-page, 6-click, 15-option cancellation journey named after Homer's epic 10-year siege. Amazon's UX team intentionally designed it to exhaust users into giving up. (FTC v. Amazon, June 2023 complaint; UX practitioner analysis, YouTube 2023)
Forced Continuity / Free Trial Trap
A free trial silently converts to a paid subscription when the trial expires, with no reminder and no affirmative consent step at conversion. 29% of EU consumers reported their free trial converted to paid without them realising it (as-of 2025). (EU Commission DFA Fitness Check, 2025 via Covington & Burling, insideprivacy.com, 2025-08-13)
Opt-out free trials (credit card required at sign-up) convert at 31.4%; opt-in trials (no card required) convert at 8.9% (as-of 2026). (ChartMogul study of 200 products, 2026)
ChartMogul 2026 data shows opt-in trial conversion at 8.9%. First Page Sage 2025 reports an 18% average free trial conversion rate. The difference is likely explained by methodology — ChartMogul segments by opt-in/opt-out; First Page Sage averages across all trial types. Both are vendor sources with potential bias.
Confirmshaming
Cancel interstitials use guilt-trip copy as the dismiss option: "No, I don't care about my health" / "No, I want to pay full price." Widely reported across SaaS and DTC subscription categories. Documented as the industry expects UX practitioners to design these flows against their own professional ethics; the FTC Dark Patterns Tip Line is a reporting route for designers who feel pressured. (r/UXDesign, February 2025, ~564 upvotes)
Subscribe & Save Pre-Selection
Checkout defaults to a subscription radio button styled more prominently than the one-time purchase option. Users discover enrolment only when the second charge appears. Most commonly reported on Amazon product pages and DTC health/beauty brands. (r/darkpatterns, May 2026, ~934 upvotes)
Skip Window Trap
Subscribers can pause or skip a delivery, but the skip window is 48–72 hours and communicated only via a promotional email. Missing the window triggers an automatic charge. Named offenders include HelloFresh, FabFitFun, and BarkBox. (r/darkpatterns, April 2026, ~671 upvotes)
Ghost Subscription
A service continues charging after the user believes they cancelled, because the cancellation was silently processed as a "pause." Prevalent in fitness apps and VPN services. This is a distinct sub-pattern from roach motel: "It's not that you can't leave — it's that the system tricks you into thinking you left when you didn't." (r/darkpatterns, May 2026, ~543 upvotes)
Ambiguous Confirmation
A cancellation confirmation page mimics an error screen, leaving users uncertain whether the cancellation completed. Users do not follow up; a second charge arrives. (r/darkpatterns, May 2026, ~612 upvotes)
Cancellation Interstitial Hell
A multi-step retention interstitial is triggered when clicking "Cancel" — offers, surveys, and guilt-trip copy ("Are you sure? You'll lose all your progress"). Technically escapable but deliberately exhausting. Adobe is the single most frequently named offender across r/darkpatterns subscription threads in 2024–2026, primarily for its "annual plan paid monthly" early termination fee (up to $150) disclosed only in fine print during sign-up, not at cancellation. (r/darkpatterns, April 2026, ~1,204 upvotes; June 2026, ~1,650 upvotes)
Benchmarks (as-of 2025–2026)
| Metric | Figure | Source | Date |
|---|---|---|---|
| EU consumers experiencing difficulty cancelling | 69% | EU Commission DFA Fitness Check | as-of 2025 |
| EU consumers who experienced auto-renewal without reminder | 62% | EU Commission DFA Fitness Check | as-of 2025 |
| EU consumers who continued subscription despite intending to cancel | 44% | EU Commission DFA Fitness Check | as-of 2025 |
| EU consumers in "loyalty traps" (promo price → price increase) | 40% | EU Commission DFA Fitness Check | as-of 2025 |
| EU consumers whose free trial converted to paid without realising | 29% | EU Commission DFA Fitness Check | as-of 2025 |
| EU consumers required to provide payment details for free trial | 90% | EU Commission DFA Fitness Check | as-of 2025 |
| Subscription platforms using at least one dark pattern | 75.7% | ICPEN/GPEN sweep of 642 sites | as-of 2024 |
| Subscription platforms using two or more dark patterns | 66.8% | ICPEN/GPEN sweep of 642 sites | as-of 2024 |
| UK adults paying for subscription they didn't knowingly sign up for | 4.7 million | National Trading Standards | as-of 2025 |
| UK consumer spend on unused subscriptions per year | £688 million | Citizens Advice | as-of 2024 |
| Estimated total UK consumer harm from subscription traps | £1.6 billion | UK Government (DMCCA impact assessment) | as-of 2024 |
| FTC complaints per day about negative option marketing | 90+ | Arnold & Porter citing FTC | as-of 2025 |
| Opt-in free trial conversion (no card required) | 8.9% | ChartMogul, 200 products | as-of 2026 |
| Opt-out free trial conversion (card required) | 31.4% | ChartMogul, 200 products | as-of 2026 |
| Average clicks to subscribe | 1–2 | Subbuddy.io | as-of 2026 |
| Average clicks to cancel | 6.7 | Subbuddy.io | as-of 2026 |
Regulatory landscape
United States
ROSCA (Restore Online Shoppers' Confidence Act, 2010) — the baseline statute, still fully operative. Requires: (1) clear and conspicuous disclosure of all material terms before obtaining billing information; (2) express informed consent before charging; (3) a simple mechanism to stop recurring charges. Civil penalties up to $53,088 per violation (as-of 2026). (FTC ROSCA guidance; Gibson Dunn, 2026)
FTC Negative Option Rule — finalized and then vacated:
- October 2024: FTC finalized amended Negative Option Rule (renamed "Rule Concerning Recurring Subscriptions and Other Negative Option Programs"), extending Click-to-Cancel requirements across all negative option programs in all media. (FTC, Federal Register, 2024-11-15)
- Staged compliance: misrepresentation provisions effective 2025-01-14; disclosure/consent/cancellation provisions effective 2025-05-14.
- July 8, 2025: 8th Circuit Court of Appeals vacated the entire rule in Custom Communications, Inc. v. FTC, No. 24-3137. Basis: FTC failed to conduct a required preliminary regulatory analysis when estimated annual economic impact exceeded $100M. (Sidley Austin, July 2025)
- The 2024 final rule is not currently operative as of July 2026.
- March 2026: FTC published ANPRM in the Federal Register, beginning new rulemaking from scratch. No new final rule is imminent. (Federal Register, 2026-03-13)
The FTC Click-to-Cancel rule is simultaneously described as "vacated" (legally null) and "effectively alive." Post-vacatur, Arnold & Porter (Feb 2026) and Jones Day (May 2026) confirm that many requirements persist via ROSCA, state laws, and Visa/Mastercard network rules. The FTC filed five new ROSCA enforcement actions since January 2025. Vacatur ≠ no compliance obligation; it removes the specific new rule but not the underlying statutory framework.
State auto-renewal laws (as-of early 2026):
- California (CARL) — enhanced law effective July 2025: express affirmative consent to auto-renewal; online cancellation without "further steps that obstruct or delay"; "save" attempts only if "cancel" button simultaneously displayed; 7–30 days notice of price change; 3–21 days notice before trial expiry for trials >31 days.
- New York — effective November 2025: advance affirmative consent to price increases OR 14-day cancellation window with pro-rata refund.
- Massachusetts — effective September 2025: pre-renewal notice 5–30 days advance.
- Minnesota — prohibits save offers unless customer affirmatively consents to receive them.
- New York City — January 2026 executive order directing consumer protection department to prioritise investigation of "subscription tricks and traps."
- Additional active laws: Colorado, Connecticut, Utah. (Arnold & Porter, 2026-02-06)
Key US enforcement actions (2025–2026):
| Company | Date | Penalty | Core allegation |
|---|---|---|---|
| Amazon | September 2025 | $2.5B ($1B penalty + $1.5B refunds) | Manipulative Prime enrolment flows + 23-step cancellation ("Iliad Flow") |
| Instacart | December 2025 | $60M refunds | Free trial auto-enrolled into paid annual subscription without adequate disclosure |
| Chegg | September 2025 | $7.5M | Failed to provide simple cancellation mechanism; continued charging after cancellation |
| TFG Holding | October 2025 | $4.8M (33-state coalition) | Auto-enrolled consumers in recurring membership without consent; difficult cancellation |
| HelloFresh | August 2025 | $7.5M (California DAs) | Enrolled without proper disclosure; no post-transaction acknowledgment; no easy cancellation |
| Uber One | December 2025 | Pending | 32 actions across 23 screens required to cancel within 48 hours of billing date |
| LA Fitness | August 2025 | Pending | Cancel required visiting gym in person or mailing letter |
| JustAnswer | January 2026 | Pending | Enrolled in recurring subscription without consent; charged higher monthly fee immediately |
| Shutterstock | May 2026 | $35M | Illegal subscription and cancellation practices |
(Sources: Arnold & Porter advisory, 2026-02-06; FTC press releases 2025-09, 2025-12, 2026-05)
United Kingdom
Digital Markets, Competition and Consumers Act 2024 (DMCCA), Part 4 — introduces the most comprehensive UK-specific subscription contract regime. (legislation.gov.uk, Royal Assent 2024)
Key provisions (enacted but not yet in force):
- Two 14-day cooling-off periods: (1) initial cooling-off immediately after contract entry; (2) renewal cooling-off after a free/discounted trial ends, or after a 12+ month contract auto-renews.
- Pre-contract information: purpose of each communication must be "immediately apparent"; on a durable medium.
- Easy cancellation: legislation will prevent terms making it "disproportionately difficult" to exit auto-renewing contracts, including narrow windows.
- No advance renewal charges: consumers cannot be made liable for payment before the rolling contract actually renews.
- Refunds within 14 days of cancellation, to the same payment method.
- Enforcement: CMA fines up to 10% of global annual turnover; no court required (CMA direct powers since April 2025).
Implementation timeline: Earlier sources (2024–early 2025) said spring 2026, later revised to autumn 2026. Freshfields (2026-04-02) confirms the current confirmed date is spring 2027. Any source citing an earlier implementation date is superseded. (Freshfields, 2026-04-02)
CMA enforcement (active as of 2026): CMA opened eight consumer protection investigations November 2025 targeting drip pricing and hidden mandatory fees. Named targets include StubHub, viagogo, Wayfair, Gold's Gym. No subscription auto-renewal case has yet been opened under the new DMCCA powers. (GOV.UK, 2025-11-18; Taylor Wessing, 2025-12)
European Union
EU Consumer Rights Directive (CRD) — grants a 14-day right of withdrawal; withdrawal period starts when the subscription commences, even if a free trial is included. Exception: digital content subscriptions where the consumer waives the withdrawal right before contract commencement (common in streaming, gaming). (Covington & Burling / Inside Privacy, 2025-08-13)
EU Unfair Commercial Practices Directive (UCPD) — prohibits misleading and aggressive practices, including Dark Patterns; UCPD guidance states "cancelling should be as easy as subscribing." (Covington & Burling, 2025-08-13)
EU Digital Services Act (DSA) — prohibits online platforms from using deceptive designs that make cancellation more difficult than subscription. (Covington & Burling, 2025-08-13)
EU Directive 2023/2673 — Mandatory Withdrawal Button (in force June 19, 2026):
- Requires all B2C online businesses (regardless of their country of HQ) to provide a mandatory digital "withdrawal button" for consumer contracts concluded online.
- Button must be clearly visible, easy to access, distinctly labelled, and continuously available during the statutory withdrawal period.
- Scope: goods, services, and digital products. Does NOT apply to contracts with no statutory withdrawal right (bespoke goods, perishable goods, sealed hygiene products).
- Extraterritorial: applies to any business selling online to EU consumers, regardless of where the business is based (US, UK, anywhere).
- Penalties: up to 4% of annual turnover in some member states; non-compliance extends the cooling-off period to 12 months + 14 days (instead of standard 14 days).
- Member states were required to transpose into national law by December 19, 2025. (Greenberg Traurig, May 2026; Crowell & Moring, 2026)
EU Digital Fairness Act (DFA) — proposed, not yet enacted:
- Formal Commission proposal expected Q4 2026. Mandatory application not expected before 2029.
- Proposed measures for subscriptions: mandatory cancellation buttons, auto-renewals off by default, pre-renewal reminders, express consent to convert free trial to paid, restricted requirement to provide payment details for free trials.
- DFA would require cancellation to be "as simple as sign-up" — the EU equivalent of FTC Click-to-Cancel.
- Legislative train: EP IMCO Committee involvement; public consultation closed October 24, 2025. (European Parliament Legislative Train, 2026; digitalfairnessact.com tracker, 2026)
Some sources conflate the EU DFA (future proposal, 2029+ at earliest) with EU Directive 2023/2673 (withdrawal button, already in force June 19, 2026). These are distinct legal instruments with different scopes and timelines. The withdrawal button is operative now; the DFA's broader subscription cancellation provisions are still years away.
What practitioners report
The platform incentive structure is a root cause identified by merchant-side Reddit practitioners: subscription apps (Recharge, Bold Subscriptions) charge merchants a percentage of subscription revenue, so the apps have no financial incentive to surface frictionless cancellation. "The app earns more if customers fail to cancel." (r/ecommerce, May 2026, ~341 upvotes)
Consumer counter-tactics have become mainstream personal finance hygiene: virtual card numbers (Privacy.com, Apple Pay virtual cards) with spending caps are the dominant protective strategy, reflecting low consumer confidence in institutional remedies. A thread about "finding 6 subscriptions I didn't know I had" received 4,200+ upvotes on r/personalfinance (March 2026), indicating the scale of passive consumer harm.
"Pause before cancel" retention flows reduce immediate churn by 18% by merchants' own account — but surfacing "pause" more prominently than "cancel" when user intent is unambiguous is contested as manipulation. (r/ecommerce, April 2025, ~278 upvotes)
Merchant communities (r/Entrepreneur, ~234 upvotes, September 2024) frame multi-step cancel flows with discount offers as ethical CRM: "If I can't offer a 50% off retention offer, I'm just losing that customer for no reason — that's not dark, that's CRM." Consumer and UX practitioner communities (r/darkpatterns, ~1,204 upvotes; r/UXDesign, ~564 upvotes) frame the same flows as coercive and deliberately exhausting. The upvote asymmetry (~5x in the consumer/practitioner direction) signals dominant public sentiment but does not resolve the commercial question. The DMCCA (UK) and proposed DFA (EU) would regulate which retention flows are permissible, but neither has yet applied enforcement to this specific context.
Key terms
| Term | Meaning |
|---|---|
| Negative option billing | US regulatory term: consumer's failure to act = consent to continue being charged |
| ROSCA | Restore Online Shoppers' Confidence Act (US, 2010) — baseline statute for online recurring charges |
| Click-to-Cancel | FTC's shorthand for the requirement that cancellation be as simple as sign-up; embedded in 2024 rule, then vacated |
| Roach Motel | Dark pattern: easy to enter, hard or impossible to exit |
| Forced continuity | Free trial silently converts to paid |
| Confirmshaming | Cancellation dismiss option uses guilt-trip copy |
| Ghost subscription | User believes they cancelled but charges continue (system processed as pause) |
| Iliad Flow | Amazon Prime's internal name for its cancellation dark pattern — FTC cited it in 2023 lawsuit |
| CARL | California Automatic Renewal Law — most comprehensive US state-level statute |
| DMCCA | Digital Markets, Competition and Consumers Act 2024 (UK) — Part 4 governs subscription contracts |
| DFA | Digital Fairness Act — proposed EU legislation targeting subscription dark patterns, among other practices |
| Directive 2023/2673 | EU directive requiring mandatory withdrawal button for B2C online contracts; in force June 2026 |
Contradictions
See inline > [!contradiction] callouts above. Summary:
- FTC rule status: vacated vs. effectively alive through ROSCA and state law
- Free trial conversion rates: opt-in 8.9% (ChartMogul 2026) vs. 18% average (First Page Sage 2025) — methodology gap
- Retention flows: legitimate CRM vs. dark pattern manipulation — contested by merchant vs. consumer/practitioner communities
- EU regulatory conflation: DFA (proposed) vs. Directive 2023/2673 withdrawal button (already in force)
- DMCCA implementation date: spring 2027 (confirmed April 2026) vs. earlier sources citing 2026
Gaps
- Fashion/apparel-specific subscription traps (Stitch Fix model) are largely absent from research findings; named offenders are SaaS, DTC health/beauty, meal kits, digital services.
- Mobile app subscription mechanics (App Store / Play Store buried renewal terms) mentioned in passing only.
- B2B subscription dark patterns not covered in consumer protection frameworks or community discussion.
- CMA investigation outcomes: all eight cases opened November 2025 remain ongoing — no final decisions, undertakings, or fines reported yet.
- FTC ANPRM comment period outcomes: new rulemaking is early-stage.
Next frontier (dangling links created by this page)
- Digital Markets Competition and Consumers Act (DMCCA) — no standalone page; Part 4 subscription regime covered here but the broader Act merits a full page
- Roach Motel — the dark pattern has enough academic and practitioner depth for its own page
- Negative Option Billing — US regulatory framing with its own enforcement history
- Confirmation Bias (UX) / Confirmshaming — practitioner-specific dark pattern