The research team argues that prior scholarship has treated AI-enabled persuasion in a fragmented way, with dark-pattern studies focusing on deceptive user interfaces, AI-in-marketing research prioritizing efficiency and personalization, AI ethics work foregrounding fairness and accountability, and consumer behavior scholarship concentrating on trust and privacy. Few studies, however, have explained how contemporary AI integrates these persuasive tools into adaptive systems capable of generating deceptive content, altering tactics instantaneously, exploiting vulnerabilities, and progressively undermining consumers’ capacity for genuinely informed decisions. To address this gap, the team conducted a multi-case qualitative analysis of seven documented international incidents of AI-driven marketing practices between 2024 and 2026, drawing on regulatory reports, investigative journalism, corporate disclosures, and peer-reviewed literature.

The contrast between traditional dark patterns and their AI-driven successors is fundamental. Classic dark patterns rely on fixed interface tricks such as misleading buttons, hidden unsubscribe options, or preselected defaults, and they can often be detected through careful inspection of the interface itself. Dark AI Patterns, by contrast, are dynamic: they monitor user behavior, continuously update predictions, generate personalized content, and self-modify strategies in real time. Manipulation increasingly originates not from static design elements but from covert, adaptive processes operating continuously in the background, making detection by consumers and regulators far more difficult.

Using reflexive thematic analysis following the approach of Braun and Clarke, the researchers identified seven high-level themes that together form their taxonomy of Dark AI Patterns. Synthetic Identity Manipulation involves the algorithmic fabrication of commercial personas designed to cultivate trust and emotional connection, exemplified by an ABC News visual investigation that uncovered fraudulent online sellers using AI-generated elderly personas, synthetic video, and fabricated emotional narratives to market mass-produced goods as artisanal. Synthetic Social Proof refers to the algorithmic generation or coordination of reviews and behavioral signals to create the impression of broad market acceptance, a mechanism at the heart of the United States Federal Trade Commission’s Operation AI Comply enforcement action against services that auto-generated persuasive customer reviews.

The remaining themes extend manipulation across the entire consumer journey. Synthetic Evidence Manipulation describes the creation or alteration of AI-generated visual or multimodal artifacts to shape judgments about contractual claims, as in a Manhattan Airbnb dispute in which a host submitted images purportedly evidencing severe property damage that investigative indicators suggested were AI-generated or manipulated. AI Washing occurs when organizations exaggerate the capabilities of purported AI systems to bolster credibility, as the FTC found in its final order against the legal-tech service DoNotPay, which had been marketed as an AI lawyer despite regulatory findings that its legal capabilities were not consistently reliable. Agentic AI Manipulation marks a fundamental shift, targeting persuasion not at humans but at autonomous AI agents that make or recommend purchases on behalf of users; Microsoft Research’s Magentic Marketplace experiments demonstrated that such agents can be swayed through fake authorities, manipulated reputation signals, and prompt injection techniques.

The final two themes address authenticity and autonomy. Synthetic Authenticity refers to AI-produced content that is technically polished but judged by audiences as emotionally hollow, a dynamic illustrated by the backlash against McDonald’s Netherlands AI-generated holiday advertisement, which viewers labeled robotic and soulless. Autonomous Commercial Manipulation describes AI systems that independently manage catalog descriptions, customer interactions, dynamic pricing, and operations with minimal human supervision, generating risks of exaggerated claims, inconsistent policies, and price volatility that complicate accountability attribution. The researchers emphasize that these themes are not mutually exclusive; several cases combined multiple mechanisms simultaneously, indicating that future AI-enabled manipulation will be increasingly hybridized and context-dependent.

Building on this empirical foundation, the study proposes Algorithmic Allure Theory, or AAT, which conceptualizes AI-enabled persuasion as a dynamic, six-stage process: algorithmic observation, in which systems continuously collect behavioral, contextual, affective, and transactional data; algorithmic interpretation, in which machine-learning models translate raw data into psychological inferences such as susceptibility to emotional appeals, price sensitivity, impulsivity, or decision fatigue; algorithmic attraction, the feedback-loop core of the theory, in which AI dynamically constructs persuasive micro-environments tailored to each consumer, including personalized recommendations, synthetic identities, adaptive pricing, and fabricated testimonials; behavioral steering, in which systems reorganize alternatives, reorder recommendations, reframe emotional contexts, and time message delivery without overtly removing choice; algorithmic delegation, in which decision authority progressively shifts from consumers to autonomous AI agents perceived as faster, more convenient, and more objective; and algorithmic governance, in which AI becomes the infrastructural backbone of digital markets, controlling what consumers see, how products are presented, and when prices change.

Central to AAT is the insight that the felt allure of algorithmic recommendations is rarely experienced as external coercion. Individuals tend to interpret algorithmic suggestions as expressions of their own preferences, thereby lowering their recognition of underlying commercial influence. The theory integrates the Elaboration Likelihood Model, Social Proof Theory, and Nudge Theory, but extends them in a crucial way: rather than treating persuasion as a one-off message transmitted from marketer to consumer, AAT frames it as a socio-technical, continuous process emerging from the ongoing interplay among AI systems, digital environments, and human cognition. The researchers derive four theoretical propositions, including the claims that as AI capabilities expand, Dark AI Patterns become more complex and more concealed, and that prolonged engagement with adaptive persuasive systems incrementally degrades the meaningfulness of informed consent even where surface transparency and voluntariness are present.

One of the study’s most consequential contributions is its reconceptualization of informed consent. Traditional policy assumes that disclosure and information provision suffice to secure consent, yet the case evidence shows that consumers may recognize the presence of AI while still remaining embedded in systems engineered to exploit their vulnerabilities. The authors argue that informed consent should be treated as a dynamic, ongoing cognitive state continually reshaped by adaptive systems, not a one-time legal formality. The erosion of consent rarely stemmed from a total lack of information; instead, it resulted from the continuous algorithmic optimization of the surrounding informational environment, meaning that even seemingly transparent interactions can compromise consumer autonomy when AI systems strategically shape perception, trust, and behavior.

Consumers are not entirely passive in the face of these developments. The study documents emergent forms of resistance, including the cultural uptake of the term AI slop as Merriam-Webster’s 2025 Word of the Year, and quantitative indicators showing that consumer preference for AI-generated creator content dropped from 60 percent in 2023 to 26 percent in 2026 according to a Billion Dollar Boy study, while Adobe’s Trust Report shows sizable declines in brand trust when AI content is used without disclosure. The researchers propose practical responses across sectors: for marketers, mandatory human review of high-impact campaigns, verification protocols for AI-generated content, and explicit labeling of synthetic media; for platform operators, detection mechanisms for synthetic identities and fabricated evidence, defenses against prompt injection, and explainable AI interfaces; and for policymakers, standardized disclosure requirements, mandatory human oversight for high-impact autonomous systems, independent algorithmic auditing, clear liability rules for synthetic evidence in commercial disputes, and stricter sanctions for AI washing. These proposals align with emerging governance frameworks such as the EU AI Act, China’s Measures for Labeling AI-Generated Synthetic Content, which took effect in September 2025 with a dual-labeling regime of visible markers and embedded metadata, and South Korea’s Framework Act on AI, effective January 2026, which requires mandatory labeling for AI-generated advertisements and treats virtual humans endorsing products as potentially unfair advertising. The authors conclude that the rise of Dark AI Patterns marks a transition from the age of digital persuasion to the age of algorithmic persuasion, and that the future of digital marketing will depend less on raw technological capability than on society’s ability to guide that capability with transparency, accountability, and respect for human agency.

Subject of Research: A theoretical framework for Dark AI Patterns and the erosion of informed consent in AI-driven digital marketing

Article Title: Algorithmic allure: a theoretical framework for dark AI patterns and the erosion of informed consent in AI-driven digital marketing

Article References: Bentameur, K., Hamadi, Z., & Bouaici, R. (2026). Algorithmic allure: a theoretical framework for dark AI patterns and the erosion of informed consent in AI-driven digital marketing. Frontiers in Communication, 11, Article 1935069. https://doi.org/10.3389/fcomm.2026.1935069

Image Credits: AI Generated

DOI: 10.3389/fcomm.2026.1935069

Keywords: artificial intelligence, digital marketing, dark patterns, informed consent, generative AI, algorithmic persuasion, consumer protection, AI ethics, agentic AI, synthetic media, AI regulation, algorithmic allure theory

The starting point is an uncomfortable observation about modern digital environments. Interfaces, recommendation systems, and social media feeds have evolved from neutral toolsets into highly optimized, adversarial ecosystems. Deceptive patterns in interface design trick users into unintended actions; algorithmic profiling quietly assembles intimate portraits from innocuous data points; information disorder pollutes the news ecosystem with misinformation, disinformation, and malinformation. Each phenomenon has matured into its own research sub-discipline with specialized taxonomies and countermeasures, but the authors argue that studying them in isolation obscures the structural machinery they share.

That shared machinery, according to the new paper, is the exploitation of well-documented cognitive vulnerabilities. Deceptive patterns capitalize on the fast, automatic, unconscious mode of thinking that psychologists call System 1, discouraging the slower, more reflective System 2. Algorithmic profiling exploits bounded rationality—our inability to weigh abstract, long-term privacy risks against immediate gratification. Information disorder feeds on what researchers term analytical laziness, the tendency to share content without critically evaluating it, compounded by a human bias toward novelty that makes false news spread faster than the truth. In each case, the result is what the authors call a Knowledge-Behavior Gap: a strategically induced rift between what users reflectively know and how they actually behave in the moment.

The evidence for this gap is not new, but the paper’s synthesis draws the contradictions together in a striking way. Users are often aware of manipulative interface design yet comply with it anyway—a phenomenon the authors label manipulation awareness versus behavioral compliance. They express strong privacy concerns yet readily disclose personal data, the well-documented privacy paradox. They value truth and know they should verify what they read, yet actively share unverified, fallacious news. Crucially, the authors emphasize that these contradictions are properties of the digital harms themselves, established in prior literature, rather than measurements from their own tools. The insufficiency of reflective knowledge alone is precisely what motivates a proactive, rather than purely informational, response.

To build that response, the researchers first compiled an annotated portfolio of three mitigation tools from their prior applied research, each targeting a different harm. Trickery is a first-person serious game that casts the player as a new employee in a laboratory guided by an unreliable narrator, navigating seven rooms that each operationalize a real deceptive pattern—from insistent questioning modeled on the nagging pattern to a vending machine that sneaks unwanted items into the player’s cart. The design draws on emotional learning and inoculation theory, the idea that pre-exposure to a weakened form of an argument builds resistance against stronger future attacks. PERSONÆR is a browser extension that runs in the background of a browsing session, extracts keywords from visited websites, and uses a large language model to synthesize a structured 300-word persona—pseudonym, gender, age range, location, and narrative background—simulating how third-party trackers might interpret the user’s passive digital behavior. FallacyCheck, also a browser extension, identifies thirteen types of logical fallacies in news articles and poses non-leading questions in contextual tooltips, prompting users to verify a claim’s logic themselves rather than triggering the defensive backfire effects associated with direct corrections.

When the authors annotated these tools side by side, structural similarities emerged across the research silos. Each tool deploys a persuasive strategy rather than a passive warning: Trickery uses simulation grounded in inoculation theory, PERSONÆR uses reduction executed through narrative framing, and FallacyCheck uses contextual reminders operationalized as non-leading questioning. Each also occupies a distinct intervention mode. Trickery builds capacity outside the moment of vulnerability, serving as restorative training before real-world harm is encountered. PERSONÆR and FallacyCheck provide scaffolding during use, compensating for bounded rationality and analytical laziness precisely at the moment of potential exploitation. And in every case, the goal is not to impose a new, system-defined good behavior but to dismantle pre-existing manipulation and restore the user’s autonomy.

From these observations the authors formalize two constructs of intermediate-level knowledge—a term from human-computer interaction research describing insights that sit between specific design instances and grand universal theories. Systemic Digital Exploitation is proposed as a conceptual construct: the strategic design of digital environments to actively exploit human psychological vulnerabilities, bypass rational decision-making, induce a Knowledge-Behavior Gap, and thwart user autonomy. Counteractive Persuasive Technologies is proposed as a bridging concept connecting theory to practice: digital interventions that actively deploy persuasive strategies to counteract SDE, bridging the gap to restore autonomy and support what legal scholars call the right to mental self-determination—the capacity to form thoughts free from covert algorithmic interference, or hypernudging.

The paper is unusually careful about where its central concept ends. SDE, the authors argue, must satisfy four jointly necessary and independently falsifiable conditions. It must be systemic, meaning a standing feature of the environment rather than an attack aimed at selected individuals—a targeted phishing campaign fails this test because it befalls particular people rather than constituting the ordinary experience of a platform’s user base. It must be digital, meaning the environment furnishes the user’s entire evidential basis for the decision; a supermarket placing expensive products at eye level fails here, because the shopper perceives the shelf directly and can check every option on the spot. It must exploit psychology rather than merely constrain capability—printer firmware updates that disable third-party ink cartridges act against users’ interests but foreclose an action outright, leaving no behavioral alternative to decouple from reflective knowledge. And it must distribute harm asymmetrically without a transparently disclosed, evaluable exchange; a retail loyalty stamp card exploits the goal-gradient effect and loss aversion, but its proposition is stated on its face and can be declined without cost.

This boundary-drawing matters because it sharpens what SDE actually names: not harm, not influence, not adversity as such, but a standing condition of the environment that leaves the user’s capabilities and knowledge intact while routing them past both at the moment of decision. The user is not prevented from acting on their values, nor argued out of them—they are bypassed, with no discrete attack to intercept and no vantage point from which the arrangement could be seen for what it is. It is this specific decoupling, the authors argue, that the four conditions isolate and that counteractive interventions are designed to reverse.

The CPT framework itself raises an obvious ethical paradox: if countermeasures use the same persuasive mechanisms as the systems they fight, do they not risk becoming new manipulations? The authors’ answer is definitional and procedural. A CPT that mandates a specific behavioral outcome is, by definition, not a CPT at all; its sole ethical mandate is restorative, and the final decision remains with the user—even if that autonomously formed choice means accepting a digital risk. The design process enforces this in two steps adapted from the established Persuasive Systems Design model: designers must first identify and name the pre-existing exploitation phenomenon and the psychological mechanism it exploits, fixing the intervention’s persuasive force to an external referent rather than a designer’s goal, and then choose an intervention mode and counteractive strategy informed by Fogg’s Behavior Model and Self-Determination Theory. The PERSONÆR tool illustrates the principle: rather than blocking trackers or warning users away from certain sites, it simply shows them what their algorithmic profile might look like, leaving the decision entirely to them. The authors acknowledge the framework cannot guarantee designer fidelity—a practitioner can name an exploitation pro forma and quietly pursue an agenda—but the claim to be a CPT is falsifiable on inspection. The paper presents no new empirical data, and the authors call for analytical validation through systematic review of independently developed tools and generative studies measuring whether such interventions measurably narrow the Knowledge-Behavior Gap they are theorized to bridge.

Subject of Research: A theoretical framework uniting digital harms such as deceptive patterns, algorithmic profiling, and information disorder under the concept of Systemic Digital Exploitation and proposing Counteractive Persuasive Technologies to restore user autonomy

Article Title: Systemic Digital Exploitation and Counteractive Persuasive Technologies: intermediate-level concept synthesis from an annotated portfolio

Article References: Kronhardt, K., & Gerken, J. (2026). Systemic Digital Exploitation and Counteractive Persuasive Technologies: intermediate-level concept synthesis from an annotated portfolio. Frontiers in Artificial Intelligence, 9, Article 1952265. https://doi.org/10.3389/frai.2026.1952265

Image Credits: AI Generated

DOI: 10.3389/frai.2026.1952265

Keywords: dark patterns, deceptive patterns, algorithmic profiling, misinformation, persuasive technology, user autonomy, mental self-determination, behavior change, human-computer interaction, self-determination theory, digital ethics, Knowledge-Behavior Gap

The headline figure of 86 percent non-compliance conceals a range of distinct violations, each of which carries its own legal weight under European and British data protection law. Two-thirds of the audited sites, 67 percent, began collecting personally identifiable information before users had given any consent at all, transmitting unique user identifiers to third-party analytics and marketing platforms. Under the GDPR and the UK GDPR, consent must be obtained before non-essential cookies are placed on a user’s device, so this practice constitutes a direct infringement rather than a technicality. In effect, the most commercially valuable data flows were already underway while the consent banner was still sitting on the screen, unread and unclicked.

Denial of choice was another widespread problem. Almost a quarter of the sites, 24 percent, offered users no way to refuse tracking whatsoever, and 2 percent displayed no consent banner at all, despite the legal requirement to do so. Even where a reject option technically existed, exercising it could be an ordeal. Only 29 percent of banners allowed users to reject tracking as easily as they could accept it, and on some sites it took as many as fifteen clicks to refuse consent, compared with the single click required to accept. The asymmetry is not subtle. A user who wants to protect their privacy must navigate layered menus and buried settings, while a user willing to be tracked resolves the interaction instantly.

The study catalogued these manipulative layouts under the umbrella term dark patterns, a phrase coined in user-experience research to describe interface designs that steer people toward choices they would not otherwise make. The audit found most banners employed at least one such technique. Visual emphasis of the accept button appeared on 60 percent of sites, making the compliant option the most eye-catching element on screen. Hiding the reject option behind a second layer of navigation occurred on 47 percent of sites, and 29 percent pre-selected privacy-unfriendly settings, requiring users to actively untick boxes to protect themselves. Each of these designs exploits well-documented quirks of human cognition, including the tendency to click prominent, brightly coloured buttons and to accept default options rather than modify them.

To test whether these designs actually change behaviour, rather than merely correlating with poor privacy outcomes, the researchers conducted a controlled online experiment. A sample of 615 UK online gamblers were presented with a simulated betting website carrying one of six different consent banners. The design most commonly used across the gambling industry made participants three to four times more likely to accept tracking than a neutral, one-click alternative. This is a striking effect size for a single interface element, and it demonstrates that the industry’s dominant banner style is not a passive or accidental feature. It functions, in the researchers’ framing, as an active nudge toward the least private option available.

Perhaps the most revealing result concerned how participants felt about their own decisions. Those who accepted tracking rated their choice as a far poorer reflection of their real privacy preferences than those who rejected it, scoring the alignment at 4.4 out of 10 compared with 7.9. In other words, people who accepted tracking under the industry-standard design knew, at some level, that the decision did not represent what they actually wanted. The design, rather than the user, was driving the outcome. Notably, the effect was the same regardless of participants’ level of gambling risk, meaning that both recreational gamblers and those at elevated risk of harm were equally susceptible to the manipulative layouts.

Under GDPR standards, consent is only valid when it is freely given, specific, informed and unambiguous, and it must be as easy to withdraw as it was to give. A consent obtained through a design that makes refusal disproportionately difficult arguably fails the freely given test, which is why the researchers characterise the overwhelming majority of audited sites as non-compliant rather than merely unfriendly. Regulators including the UK Information Commissioner’s Office have previously warned against consent banners that nudge users toward acceptance, but this study provides the first systematic, industry-wide quantification of the problem within gambling, a sector whose business model depends heavily on data-driven customer acquisition and retention.

The stakes extend well beyond data protection compliance. The researchers argue that the data harvested through these designs underpins the personalised marketing and cross-web tracking of gambling customers, and that the characteristics used to identify commercially valuable players overlap substantially with the behavioural markers of gambling harm. In practical terms, the same signals that flag someone as a profitable target, such as frequent sessions, rapid betting patterns and responsiveness to promotions, are also the signals associated with problematic play. Professor Simon Dymond, who supervised the research alongside Dr Martyn Quigley and Dr Jamie Torrance, noted that the behavioural data being harvested is not neutral, and that getting consent right is not just a data protection issue for the industry but an important part of preventing gambling harm.

Jack McGarrigle, the PhD student who led the study, described the audit’s findings as stark, observing that most sites are not giving customers a fair choice about tracking, with some making it a single click to accept and up to fifteen to refuse. He added that the follow-up experiment showed the effect is not incidental, and that the banners work exactly as one would expect, nudging people toward decisions they do not actually agree with. The transparency of the research itself is notable: the data, pre-registration materials and screenshots of all 624 audited sites have been made publicly available through the Open Science Framework, allowing other researchers, regulators and journalists to verify the findings independently.

The study arrives at a moment of intensifying scrutiny of both the gambling industry and the digital advertising ecosystem that sustains it. As regulators weigh how to enforce consent rules against operators whose interfaces are built to circumvent them, the Swansea findings supply a detailed evidentiary baseline: a complete census of a regulated national market, a taxonomy of the dark patterns in use, and experimental proof that those patterns shift real decisions. Whether the response takes the form of enforcement action, mandatory interface standards, or redesign of the consent framework itself, the research makes clear that the current system, in which nine in ten licensed operators fail to offer a fair choice, is not a marginal compliance gap but a structural feature of how the online gambling industry acquires its data.

Subject of Research: GDPR compliance and dark-pattern cookie consent design on UK online gambling websites

Article Title: Nine in 10 UK gambling websites breaching data privacy law, study finds

Article References: Nine in 10 UK gambling websites breaching data privacy law, study finds. (n.d.). Original publication

Image Credits: AI Generated

DOI: Not provided

Keywords: GDPR, online gambling, cookie consent, dark patterns, data privacy, Swansea University, Gambling Commission, behavioural experiment, gambling harm, digital tracking, consent banners, UK regulation