Pre-Checked Boxes
What it is
Presenting a choice with the option that benefits the business already selected — the marketing consent ticked, the add-on included, the donation set to recurring — so that inaction becomes agreement.
How it works
Real-world examples
- •Planet49 (CJEU, 2019): a promotional lottery site pre-ticked the box consenting to cookies and to partner marketing; the court held that a pre-ticked box cannot constitute consent under EU law.
- •Software installers of the 2000s and 2010s that pre-selected bundled toolbars and security scanners — the Ask toolbar shipped with Java and the McAfee scanner offered with Adobe Flash Player — so that “Next, Next, Finish” installed software no one chose.
- •Political fundraising: reporting in 2021 showed the Trump campaign's WinRed pages pre-checking boxes that turned one-off gifts into weekly recurring donations, producing well over $100 million in refunds; pre-checked recurring boxes had appeared on some Democratic pages too, and the Federal Election Commission unanimously recommended that Congress ban the practice for all committees.
- •Checkout pages that pre-select “round up for charity”, “shipping protection”, or an extended warranty, the sibling of sneak-into-basket in which the item is visible but the choice was made for you.
Ethical guidelines
- ●Every box that adds a cost, a subscription, a data use, or a commitment starts unticked; the user's affirmative act is the consent.
- ●Where a default is genuinely in the user's interest (retirement enrolment, security updates), say so beside the box and make the opt-out one click.
- ●A recurring payment must never be the default; the first charge and its frequency must be stated where the amount is entered.
- ●A ticked box obtained by default is not a record of consent, and should not be treated as one in analytics or in a dispute.
How to defend against it
- ►Before pressing any final button, scan for ticks: every checkbox, toggle, and radio button on the page. Anything selected that you did not select gets unselected.
- ►For software, always choose “custom” or “advanced” install and read each screen; on Windows, a utility such as Unchecky unticks bundled offers automatically.
- ►For donations, look for a “monthly” or “weekly” toggle near the amount and read the confirmation e-mail for the word “recurring”; if you were enrolled by default, cancel through the platform and ask your card issuer to block the merchant.
- ►Treat any pre-ticked consent as invalid and say so: in the EU and UK it is, and a complaint to the data-protection authority citing Planet49 is straightforward.
- ►Use a virtual card with a per-merchant limit so that a defaulted add-on or recurring charge fails rather than slips through.
From the Defense Playbook
On any checkout, sign-up, or consent screen, read each checkbox and toggle before you continue, noting whether it is already ticked and whether ticking means yes or no, because defaults and confusing wording are how extras, marketing consent, and data sharing are obtained from people who never chose them.
When an interface tricks you (a hidden charge, a fake countdown, a cancellation maze, consent you never gave), document it and report it to the regulator and the platform, because enforcement against deceptive design is driven by complaint data and one documented report protects people who would never have spotted the trick.
Ask whether you would be comfortable seeing the tactic, including how it works and why you chose it, described accurately on the front page of a newspaper read by your audience; if the tactic only works when the audience does not know about it, treat that as a finding.
List every persuasive element in a campaign, tag each one as neutral craft, dual-use, or manipulative by design, and for each dual-use element write down where the line is and which side of it you are on.
Every playbook entry states how strong its evidence is and when not to use it. Browse the full playbook.
References
- Johnson, E. J., Bellman, S., & Lohse, G. L. (2002). Defaults, Framing and Privacy: Why Opting In-Opting Out. Marketing Letters, 13(1), 5-15The experiment showing that the default setting of a marketing-consent question roughly doubles the share of people who end up agreeing.
- Madrian, B. C., & Shea, D. F. (2001). The Power of Suggestion: Inertia in 401(k) Participation and Savings Behavior. Quarterly Journal of Economics, 116(4), 1149-1187Automatic enrolment raised retirement-plan participation dramatically — the size of the default effect on a consequential choice.
- Court of Justice of the European Union (2019). Bundesverband der Verbraucherzentralen v. Planet49 GmbH, Case C-673/17. Judgment of 1 October 2019The ruling that a pre-ticked checkbox does not constitute valid consent.
- Federal Election Commission (2021). Legislative Recommendations of the Federal Election Commission 2021. FEC, adopted May 2021The Commission's unanimous recommendation that Congress prohibit pre-checked recurring-contribution boxes.
Related Articles
Dark Patterns in UX: How Apps Manipulate Your Behavior
Subscription traps, misleading interfaces, and engineered addiction. Understanding the persuasion techniques built into the apps you use every day.
OSINT for Beginners: Open Source Intelligence Explained
Open Source Intelligence (OSINT) uses publicly available data to gather actionable insights. Here is a beginner-friendly guide to what OSINT is and how it is used.