Dark Patterns in Cookie Consent: How Websites Trick You Into Accepting

Cookie banners are supposed to give you a real choice. Many are designed so that "Accept all" is the easy path and saying no takes work. These design tricks are called dark patterns.

Common tricks

• No reject button on the first screen. "Accept all" is right there; rejecting means clicking into settings.
• Loud accept, quiet reject. A bright, big accept button next to a pale text link for rejecting.
• Pre-ticked boxes for advertising and personalization inside the settings panel.
• "Legitimate interest" toggles that stay on even after you reject everything, hidden in a separate tab.
• Endless vendor lists: hundreds of partners to switch off one by one.
• Nagging: the banner comes back on every visit until you accept.
• Cookie walls: "accept or leave" with no other option.

What regulators have said

European regulators have pushed back on several of these. In January 2022, France's data protection authority, the CNIL, fined Google 150 million euros and Facebook 60 million euros because refusing cookies on their sites took more clicks than accepting them. Guidance from EU data protection authorities says rejecting should be as easy as accepting, and pre-ticked boxes don't count as consent. Rules and enforcement differ by country, and cookie walls in particular are treated differently in different places.

How to reject quickly anyway

1. Look for "Reject all", "Necessary only", or "Continue without accepting", sometimes as small text at the edge of the banner.
2. In the settings panel, check both the Consent and Legitimate interest tabs, and use "Object to all" if it's there.
3. Let a tool do it. Cookie Auto-Reject clicks reject on common banner platforms like OneTrust, Cookiebot, and TrustArc, so you don't have to.

Why it matters

Accepting everything allows ad networks to track you across sites and build a profile. Why clicking Accept all is worse than you think explains what you're agreeing to.