The US Federal Trade Commission has a name for the thing you have felt on a pushy checkout page: dark patterns — in its September 2022 staff report Bringing Dark Patterns to Light, "design practices that trick or manipulate users into making choices they would not otherwise have made." The report groups the concern into four areas, and it is worth learning them, because together they are a nearly complete description of the modern subscription trap:
Notice what unites the four: in each case the page's words are doing quiet work — a timer's claim, a decline button's wording, a renewal term's hiding place. That is good news for you, because words can be collected, pasted somewhere quiet, and read with the pressure switched off. It is the entire idea behind our Subscription Trap Scanner — and, as this guide will keep repeating, words are only half of any page.
How much of the internet actually works this way? In 2024 the question got a measured answer. A global sweep coordinated by the FTC with the International Consumer Protection and Enforcement Network (ICPEN) and the Global Privacy Enforcement Network (GPEN) — 27 authorities in 26 countries, reviewing between January 29 and February 2, 2024 — examined 642 subscription sites and apps. Nearly 76% used at least one possible dark pattern, and nearly 67% used multiple. The two most common findings were sneaking — hiding or delaying material information, such as the inability to turn off auto-renewal inside the purchase flow — and interface interference: obscuring information or preselecting options on the consumer's behalf. GPEN's parallel privacy review of 1,010 sites and apps found roughly 97% used at least one deceptive design practice.
Europe had already run the same experiment on retail. The European Commission's Consumer Protection Cooperation sweep (checked in 2022, published January 2023) looked at 399 retail websites and apps and found 148 with at least one of the three patterns it targeted: 42 fake countdown timers, 54 cases of false hierarchy, and 70 of hidden information — with 23 sites hiding information specifically to push subscriptions.
One qualifier matters, and honest writing keeps it: the FTC noted that its sweep did not determine that any specific site acted unlawfully. A pattern is a flag, not a verdict — the same distinction our scanner is built on. Prevalence this high cuts both ways, too: with patterns on three quarters of subscription pages, the skill is not avoiding every flagged page. It is knowing exactly what you agreed to before the first charge lands.
If the sweeps are the measurement, the UK's October 2026 enforcement is the proof that the patterns have prices. On October 14, 2026, the Competition and Markets Authority announced £6 million in fines against three firms for misleading sales tactics — each case a different trap from the FTC's list, which we covered in full in our guide to the CMA fines:
| Firm | The trap | The outcome |
|---|---|---|
| Wayfair | False time-limited offers — "Daily Deals" and "Flash Deals" with countdown timers, on products that stayed at the same or a lower price after the deadline passed | £4.8 million fine; no consumer refunds ordered in that case |
| Appliances Direct | Pre-ticked paid extras added automatically — the CMA: "Pre-ticked boxes and other forms of automatic opt-in are not allowed," express consent is required — plus repeated fake countdown discount codes | £1.2 million fine plus about £432,000 in refunds, averaging roughly £25 per customer |
| Gold's Gym | A mandatory joining fee left out of the headline price | £45,000 fine plus £9,220 paid to 726 customers |
All three firms settled early and received 40% penalty reductions. The CMA put the cases in context in the same release: more than £12 million in fines and about £2.4 million in refunds secured in the first 18 months of its powers under the UK's DMCC Act. Read the three rows again as a consumer rather than a lawyer: a timer that meant nothing, a box that arrived ticked, a fee that appeared at the end. Every one of them is visible before you pay — if you know to look, and if you look at the words as well as the design.
Here is where a great deal of current advice quietly goes wrong, so this section exists to be precise. You may have read that US federal law now requires subscriptions to be cancellable in one click, as easy to leave as to join. That rule — the FTC's amended Negative Option Rule, universally nicknamed click-to-cancel — is not in force. On July 8, 2025, the Eighth Circuit vacated the rule in full in Custom Communications, Inc. v. FTC, on procedural grounds: the court held that the FTC had failed to produce a required preliminary regulatory analysis. The FTC subsequently restored the pre-2024 rule text, effective February 12, 2026, and on March 11, 2026 announced a new rulemaking process (an ANPRM) to restart the work. A replacement rule may come. It has not come yet.
What still governs online subscriptions in the US is the older framework, which the vacatur did not touch: ROSCA (the Restore Online Shoppers' Confidence Act), Section 5 of the FTC Act against unfair or deceptive practices, and state automatic-renewal laws, several of which are stricter than the federal baseline. In the UK, the DMCC Act gives the CMA the direct fining powers behind the £6 million above. The practical translation: a hard cancellation route may well breach these laws — but it is not automatically illegal under a one-click rule that does not currently exist, and any page that tells you otherwise is working from old news. Your remedies are the unglamorous ones: cancel according to the terms you actually agreed to, in writing where the page allows it, document everything, report the practice (ReportFraud.ftc.gov in the US; Trading Standards via Citizens Advice, or the CMA, in the UK), and dispute the charge if money is taken after a proper cancellation.
Our Subscription Trap Scanner is built directly on the regulator material above. You paste the words from a signup, trial or checkout page — or photograph the page and let the in-browser reader extract them, the same private architecture as Scan to Dispute — and it checks the text against seven pattern categories drawn from the FTC and CMA lists: the free start that turns into a bill, extras added before you chose them, the hard exit, the embarrassing "no", the pressure phrases, the late fees, and the buried money terms. The result is one of three honest bands about the wording: red flags found; worth a second look; or nothing spotted in the text you pasted.
Its limits are printed on it, and they are real. Text cannot prove a countdown false — the CMA proved Wayfair's offers false by watching them outlive their deadlines, which no paste can do. Text cannot show a box that arrived ticked, a total that grows on the next step, or a decline button shrunk into grey. And a flag is never an accusation: legitimate sellers use countdowns when the deadline is real. What the scanner buys you is the one thing the page is designed to deny you — a quiet minute with the words, the pressure off, and the exits mapped before money moves.
Free, in your browser, nothing uploaded — and the two example buttons show you exactly what a flagged text and a clean one look like.
Words are half the page. The other half is layout, and layout is checked by eye — which is why the scanner attaches this same checklist to every result, clear ones included:
If the charge has already landed, the argument stops being about design and becomes a billing dispute with a clock on it — which is the ground this site exists for. Work it in order:
A timer by itself is not illegal. A false one — an offer presented as ending when it does not — may breach consumer law: Section 5 of the FTC Act and ROSCA in the US, the DMCC Act in the UK. The UK regulator fined Wayfair £4.8 million in October 2026 for time-limited offers that were not really time-limited. Whether any specific page breaks the law is a decision for regulators and courts, which is why honest tools flag the wording and never deliver the verdict.
It tried to. The FTC's amended Negative Option Rule — widely called click-to-cancel — was vacated in full by the Eighth Circuit on July 8, 2025, on procedural grounds, before it could take effect. The FTC restored the pre-2024 rule text effective February 12, 2026 and announced a fresh rulemaking process in March 2026. So there is currently no US federal one-click-cancel rule in force. What still governs online subscriptions is ROSCA, Section 5 of the FTC Act, and state automatic-renewal laws; in the UK, the DMCC Act gives the CMA direct fining powers.
No tool can honestly do that, including ours. A text scanner reads wording only: it cannot verify a countdown is real, cannot see whether a box arrived ticked, cannot see prices waiting on later steps, and cannot judge layout or colour tricks at all. The strongest honest result is "nothing spotted in the words you pasted" — which is why our scanner attaches a visual checklist to every result, including the clear ones.
That charge is a billing dispute, and it runs on deadlines. Gather your proof of cancellation (the confirmation screenshot, the email, or your notes of the call — date, time, the name you were given), then dispute the charge with your card issuer in writing and inside the window: for US credit cards the Fair Credit Billing Act gives you 60 days from the statement that showed the error, and card-network windows generally run to 120 days from the transaction. Our deadline calculator works out which date binds in your case.
Sources (verified October 24, 2026): FTC staff report, "Bringing Dark Patterns to Light" (ftc.gov, September 15, 2022 — definition, four concern areas, Credit Karma "pre-approved" example); FTC/ICPEN/GPEN press release (ftc.gov, July 10, 2024 — 642 subscription sites and apps reviewed January 29–February 2, 2024 by 27 authorities in 26 countries; nearly 76% with at least one possible dark pattern, nearly 67% with multiple; "sneaking" and "interface interference" most common; GPEN privacy review of 1,010 sites and apps, about 97% with at least one deceptive design practice; the review did not determine unlawfulness); European Commission CPC sweep page (commission.europa.eu — 2022 sweep, results published January 2023: 399 retail websites and apps, 148 with at least one targeted pattern, including 42 fake countdown timers, 54 false hierarchy, 70 hidden information, 23 hiding information to push subscriptions); CMA press release, "CMA fines firms £6 million for misleading sales tactics" (gov.uk, October 14, 2026 — Wayfair £4.8 million with no consumer refunds ordered; Appliances Direct £1.2 million plus about £432,000 in refunds; Gold's Gym £45,000 plus £9,220 to 726 customers; early-settlement 40% penalty reductions; more than £12 million in fines and about £2.4 million in refunds in the first 18 months of DMCC powers); click-to-cancel status — Eighth Circuit decision in Custom Communications, Inc. v. FTC (July 8, 2025) vacating the amended Negative Option Rule in full on procedural grounds, FTC restoration of the pre-2024 rule text (effective February 12, 2026) and ANPRM (announced March 11, 2026), as reported in Kirkland & Ellis, Steptoe and Goodwin client alerts checked October 24, 2026; ROSCA, FTC Act Section 5 and state automatic-renewal laws unaffected.
Last updated: October 24, 2026.