Roach Motel
What it is
A flow designed so that getting in takes one click and getting out takes a maze: subscriptions, memberships, and accounts that are effortless to join and deliberately laborious to cancel or delete.
How it works
Real-world examples
- •Amazon Prime: the FTC's June 2023 complaint alleged a multi-page cancellation flow that employees called “Iliad”, after the Norwegian Consumer Council's January 2021 report “You Can Log Out, But You Can Never Leave” had mapped the same steps. In September 2025 Amazon agreed to a settlement the FTC valued at roughly $2.5 billion in penalties and refunds.
- •Gym memberships that could be started online but ended only in person or by certified letter — the model case behind California's Automatic Renewal Law, amended in 2018 to require that anything sold online can be cancelled online.
- •Germany's “Kündigungsbutton” law, in force since July 2022, responded to the same pattern by requiring a clearly labelled cancellation button for any consumer contract concluded online.
- •The FTC's 2024 “click-to-cancel” amendment to its Negative Option Rule was vacated by the Eighth Circuit in July 2025 on procedural grounds, leaving ROSCA (2010), which still requires a “simple mechanism” to stop recurring charges, as the main US federal tool.
Historical case studies
Ethical guidelines
- ●Symmetry is the standard: cancellation must be at least as easy as enrolment, in the same channel, with no more steps than sign-up required.
- ●A retention offer may be shown once and must be skippable in one click; it must never be a gate.
- ●Phone-only or chat-only cancellation for a service joined online is obstruction, and is unlawful under ROSCA, California's ARL, Germany's cancellation-button rule, and the EU Consumer Rights Directive framework.
- ●Account deletion and data erasure requests deserve the same symmetry; “you can't leave” is not a retention strategy but a hostage strategy.
How to defend against it
- ►Before subscribing, search “[service] cancel” and read what people found. The cancellation flow is the product's true terms; if it requires a phone call, decide accordingly.
- ►Pay with a virtual card that you can pause or that expires (bank-issued virtual cards or services such as Privacy.com) so the seller cannot bill past your intent.
- ►Set a calendar reminder two days before any trial converts, and cancel from the reminder rather than from memory.
- ►Screenshot every step of the cancellation, including the confirmation screen, with the date visible. If charges continue, dispute them with your card issuer and cite the screenshots.
- ►With retention agents use the broken-record technique: “I understand. Please cancel now.” Do not evaluate the offers; each one is designed to reopen the decision.
- ►In the EU use the mandatory cancel button and, if it is missing, complain to your national consumer authority or Digital Services Coordinator; in the US file at reportfraud.ftc.gov and with your state attorney general.
From the Defense Playbook
Pay for free trials and subscriptions with a virtual or single-merchant card number that you can cap, pause, or close yourself, so that a renewal you did not want fails at the payment stage instead of depending on the merchant's cancellation process.
At the moment you start any trial, introductory rate, or auto-renewing contract, put a reminder in your calendar a few days before it renews, with the cancellation link and the price it will jump to, because the business model counts on you forgetting.
Before entering payment details, spend one minute finding out how you would leave: search the service's name with "cancel", read the cancellation terms, and treat a hard or hidden exit as a price you are being asked to pay.
When an interface tricks you (a hidden charge, a fake countdown, a cancellation maze, consent you never gave), document it and report it to the regulator and the platform, because enforcement against deceptive design is driven by complaint data and one documented report protects people who would never have spotted the trick.
Calmly repeat the same short statement of what you want or will not do, in the same words and tone, as many times as it takes, without being drawn into answering each new argument.
Ask whether you would be comfortable seeing the tactic, including how it works and why you chose it, described accurately on the front page of a newspaper read by your audience; if the tactic only works when the audience does not know about it, treat that as a finding.
Every playbook entry states how strong its evidence is and when not to use it. Browse the full playbook.
References
- Brignull, H. (2023). Deceptive Patterns: Exposing the Tricks Tech Companies Use to Control You. Testimonium LtdThe roach motel term, its definition, and its place in the dark-patterns taxonomy.
- Forbrukerrådet (Norwegian Consumer Council) (2021). You Can Log Out, But You Can Never Leave: How Amazon Manipulates Consumers to Keep Them Subscribed to Amazon Prime. Forbrukerrådet report, January 2021Step-by-step documentation of the Prime cancellation flow and the complaint to European consumer authorities.
- Federal Trade Commission (2023). Complaint, Federal Trade Commission v. Amazon.com, Inc.. U.S. District Court for the Western District of Washington, filed June 21, 2023The allegation that the Prime cancellation process was internally called “Iliad” and was designed to deter cancellation.
- Sunstein, C. R. (2021). Sludge: What Stops Us from Getting Things Done and What to Do about It. MIT PressThe concept of sludge as friction that imposes costs on people in order to serve the institution imposing it.
Related Articles
Dark Patterns in UX: How Apps Manipulate Your Behavior
Subscription traps, misleading interfaces, and engineered addiction. Understanding the persuasion techniques built into the apps you use every day.
OSINT for Beginners: Open Source Intelligence Explained
Open Source Intelligence (OSINT) uses publicly available data to gather actionable insights. Here is a beginner-friendly guide to what OSINT is and how it is used.