Misdirection UI
What it is
Using visual design — colour, size, position, motion, and borrowed iconography — to pull attention toward the choice the designer wants and away from the one the user wants, without changing a word of the text.
How it works
Real-world examples
- •Cookie and consent banners with a prominent “Accept all” button and a grey “Manage settings” link; Nouwens et al. (2020) found that removing the reject option from the first layer raised consent rates by 22-23 percentage points.
- •Microsoft's 2016 “Get Windows 10” prompt, in which clicking the window's close X was treated as consent to schedule the upgrade — reversed after public complaint.
- •Fake “Download” buttons served as advertisements on file-hosting and freeware sites in the mid-2010s, positioned where the real, smaller link was expected.
- •The Palm Beach County butterfly ballot in the 2000 US presidential election, whose staggered punch holes led an unusual number of voters to select Pat Buchanan; Wand et al. (2001) estimated the effect at over two thousand votes — an unintentional but exact demonstration of layout driving choice.
- •The Norwegian Consumer Council's 2018 report “Deceived by Design” documented colour and placement asymmetries steering Facebook and Google users toward privacy-intrusive settings.
Ethical guidelines
- ●Options of equal consequence get equal visual weight; California's CPRA regulations call this “symmetry in choice” and the EDPB and DSA Article 25 apply the same standard.
- ●Never repurpose a convention: an X must close, “Cancel” must cancel, and an advertisement must not resemble a control.
- ●Design the decline path first and make it one click; if the accept path is easier, the design is steering.
- ●Test with users what they think each control does before shipping; a control most users misread is deceptive whatever the label says.
How to defend against it
- ►Find the smallest, greyest text on the screen first; on a manipulated interface it is usually the honest option.
- ►Hover before clicking and read the status bar or link preview; a “download” that points to an ad network is an ad.
- ►Use the Tab key to move focus through the actual controls: hidden or de-emphasized buttons appear in the focus order even when they are visually buried.
- ►Install a consent-automation extension such as Consent-O-Matic (Aarhus University) to answer cookie banners with your standing preference, removing the banner's visual design from the decision.
- ►Download software only from the vendor's own site, and check the file name and extension before opening anything a “download” button produced.
- ►Report asymmetric interfaces under DSA Article 25 (EU), the CPRA regulations (California), or to the FTC (US).
From the Defense Playbook
Before entering payment details, spend one minute finding out how you would leave: search the service's name with "cancel", read the cancellation terms, and treat a hard or hidden exit as a price you are being asked to pay.
On any checkout, sign-up, or consent screen, read each checkbox and toggle before you continue, noting whether it is already ticked and whether ticking means yes or no, because defaults and confusing wording are how extras, marketing consent, and data sharing are obtained from people who never chose them.
When an interface tricks you (a hidden charge, a fake countdown, a cancellation maze, consent you never gave), document it and report it to the regulator and the platform, because enforcement against deceptive design is driven by complaint data and one documented report protects people who would never have spotted the trick.
Every playbook entry states how strong its evidence is and when not to use it. Browse the full playbook.
References
- Gray, C. M., Kou, Y., Battles, B., Hoggatt, J., & Toombs, A. L. (2018). The Dark (Patterns) Side of UX Design. Proceedings of the 2018 CHI Conference on Human Factors in Computing Systems · linkThe interface-interference category, including aesthetic manipulation and false hierarchy.
- Wand, J. N., Shotts, K. W., Sekhon, J. S., Mebane, W. R., Herron, M. C., & Brady, H. E. (2001). The Butterfly Did It: The Aberrant Vote for Buchanan in Palm Beach County, Florida. American Political Science Review, 95(4), 793-810The estimate that ballot layout alone produced over two thousand unintended votes in 2000.
- Nouwens, M., Liccardi, I., Veale, M., Karger, D., & Kagal, L. (2020). Dark Patterns after the GDPR: Scraping Consent Pop-ups and Demonstrating their Influence. Proceedings of the 2020 CHI Conference on Human Factors in Computing SystemsThe field experiment showing that visual placement of the reject option changes consent rates by 22-23 percentage points.
- Treisman, A. M., & Gelade, G. (1980). A Feature-Integration Theory of Attention. Cognitive Psychology, 12(1), 97-136The basis for salience-driven attentional capture that misdirection exploits.
Related Articles
Dark Patterns in UX: How Apps Manipulate Your Behavior
Subscription traps, misleading interfaces, and engineered addiction. Understanding the persuasion techniques built into the apps you use every day.
OSINT for Beginners: Open Source Intelligence Explained
Open Source Intelligence (OSINT) uses publicly available data to gather actionable insights. Here is a beginner-friendly guide to what OSINT is and how it is used.