DigitalMANIPULATIVE

Sneak into Basket

What it is

Adding an item, service, or upgrade to the shopping cart without the buyer choosing it — through a pre-selected add-on, an opt-out box, or an insertion during checkout — so that not buying it requires noticing and acting.

How it works

The pattern combines the default effect with checkout tunnel vision. At the payment stage, attention is on finishing the task; line items are skimmed rather than read, and a small addition relative to the total falls below the threshold at which it seems worth stopping to fix (people judge changes in proportion to the base, so a £1 mug on a £60 order barely registers). The added item is usually framed as protective — insurance, a warranty, “priority handling”, “shipping protection”, a carbon offset — so removing it feels like accepting a small risk rather than declining a purchase. Brignull named the pattern; Mathur and colleagues grouped it with hidden costs and hidden subscriptions under “sneaking”, and identified retailers whose checkout scripts inserted such items automatically. Johnson and Goldstein's 2003 organ-donation evidence shows how powerful pre-selection is: defaults do most of the choosing. The EU Consumer Rights Directive (2011) responded directly: consent to any extra payment cannot be inferred from a default the consumer must reject, and money taken that way is refundable.

Real-world examples

  • •Sports Direct was widely reported in 2016 to be adding a £1 “large mug” (or magazine) to online orders unless the shopper spotted and removed it.
  • •Airline checkouts that pre-selected travel insurance before the 2014 application of the EU Consumer Rights Directive; Ryanair's earlier flow, in which “no insurance” had to be found inside a country drop-down list, is the textbook case.
  • •Domain registrars and web hosts that pre-select “privacy protection”, email, or site-builder add-ons in the cart, so the first-year total is materially higher than the advertised domain price.
  • •Ticket sellers and travel sites that add “refund protection” or “ticket insurance” as an opt-out line item, a practice Mathur et al. (2019) catalogued among “sneak into basket” instances.

Ethical guidelines

  • ●Anything that adds to the bill requires an affirmative, unticked, clearly labelled action by the customer.
  • ●Removing an add-on must be as easy as adding one, and the price impact of each line must be visible where the decision is made.
  • ●Under EU law (Consumer Rights Directive, Article 22) payments obtained through pre-selected extras are refundable; in the US the FTC treats undisclosed add-on charges as unauthorized charges under Section 5 and ROSCA.

How to defend against it

  • ►On the final review page, read the cart line by line and add up the items you chose; if the subtotal is higher than your sum, something was added.
  • ►Untick and remove anything you did not select, then screenshot the corrected cart before paying so you can prove what you agreed to.
  • ►Use a virtual card with a limit set to the expected total; an add-on that pushes the charge over the limit fails rather than slipping through.
  • ►If a sneaked item was charged, request a refund citing Article 22 of the Consumer Rights Directive (EU) or dispute it with your card issuer as an unauthorized charge (US), and report the site.

From the Defense Playbook

Use a Virtual Card for Subscriptions and Free Trialsminutes

Pay for free trials and subscriptions with a virtual or single-merchant card number that you can cap, pause, or close yourself, so that a renewal you did not want fails at the payment stage instead of depending on the merchant's cancellation process.

Read Every Checkboxseconds

On any checkout, sign-up, or consent screen, read each checkbox and toggle before you continue, noting whether it is already ticked and whether ticking means yes or no, because defaults and confusing wording are how extras, marketing consent, and data sharing are obtained from people who never chose them.

Report Dark Patternsminutes

When an interface tricks you (a hidden charge, a fake countdown, a cancellation maze, consent you never gave), document it and report it to the regulator and the platform, because enforcement against deceptive design is driven by complaint data and one documented report protects people who would never have spotted the trick.

Every playbook entry states how strong its evidence is and when not to use it. Browse the full playbook.

References

  1. Mathur, A., Acar, G., Friedman, M. J., Lucherini, E., Mayer, J., Chetty, M., & Narayanan, A. (2019). Dark Patterns at Scale: Findings from a Crawl of 11K Shopping Websites. Proceedings of the ACM on Human-Computer Interaction, 3(CSCW), Article 81 · link
    The “sneaking” category (sneak into basket, hidden costs, hidden subscription) and the documented checkout insertions.
  2. Johnson, E. J., & Goldstein, D. (2003). Do Defaults Save Lives?. Science, 302(5649), 1338-1339
    The strength of default effects: pre-selected options are overwhelmingly retained.
  3. European Parliament and Council (2011). Directive 2011/83/EU on consumer rights (Consumer Rights Directive), Article 22. Official Journal of the European Union
    The rule that consent to additional payments cannot be inferred from default options the consumer must reject, and the refund entitlement.
Last reviewed
Suggest a correction

Detect Sneak into Basket in any text

Paste any message, email, or article into our free Manipulation Detector to see if Sneak into Basket or other techniques are being used on you.

Try the Detector FreeCreate Free Account

Related Articles

Dark Patterns in UX: How Apps Manipulate Your Behavior

Subscription traps, misleading interfaces, and engineered addiction. Understanding the persuasion techniques built into the apps you use every day.

7 min read

OSINT for Beginners: Open Source Intelligence Explained

Open Source Intelligence (OSINT) uses publicly available data to gather actionable insights. Here is a beginner-friendly guide to what OSINT is and how it is used.

10 min read