When does a pattern become harmful?

Deception is not the same as harm. The descriptive catalogue says what a technique is; this rubric is the separate judgement layer that says how bad a given instance is.

First: whose purpose does it serve?

Before weighing how harmful a mechanic is, ask why it exists. Every pattern here is tagged by the purpose it serves — a fast first test for separating a standard game mechanic from a deceptive one.

Serves gameplay

Primarily for the player's experience — usually a standard mechanic, rarely deceptive on its own.

Gameplay & business

Serves play and the provider at once — the contested middle where the conditions below decide.

Serves business

Primarily for revenue, retention, or data — the most suspect, and the clearest dark-pattern candidates.

Acceptable

Concerning

Harmful

Impermissible

increasing severity →

Eight conditions

Each dimension pushes a given instance greener (more acceptable) or darker (more harmful). When locus + consent + vulnerability all tip darker, the case for “harmful” — and at the extreme “impermissible” — is strongest.

Dimension	Greener	Darker
Asymmetry of benefit	Mutual, or player-favouring.	Strongly provider-favouring at the player's expense.
Consent & expectation	The player opted into this kind of influence; the mechanism is overt.	Covert; outside what was consented; 'consent' was manufactured by another pattern.
Locus (diegetic vs commercial)	Deception lives inside the consented fiction / fair-play (a bluff, a twist).	Deception or extraction operates on the player-as-consumer (store, billing, data).
Materiality of harm	Trivial stakes.	Large or escalating loss of money, time, or data.
Pressure intensity	Gentle, resistible nudge.	Aggressive, repeated, scarcity/urgency-laden coercion.
Reversibility & exit	Easy to undo, refund, cancel, or disable.	Locked-in; obstructed exit; non-refundable.
Transparency of material info	Costs, odds, and terms are clear and timely.	Odds or costs are hidden, delayed, or obfuscated.
Vulnerability of target	Competent, informed adult.	Children, problem gamblers, 'whales', cognitively loaded or impaired users; SES-correlated targeting.

Severity gradient

Tier 1

Strongest evidence · candidates for prohibition

Randomised paid mechanics (loot boxes/gacha), especially with hidden odds and especially to minors; manipulative monetisation targeting children.

Tier 2

Clear consumer detriment · growing evidence

Obstructed exit / sludge, hidden costs, premium-currency obfuscation, aggressive FOMO, and pay-to-win in competitive contexts.

Tier 3

Context-dependent · harmful mainly under the rubric

Grinding, daily streaks, timers, and social/parasocial nudges — ordinary engagement design that turns harmful chiefly when combined with monetisation, covert operation, or vulnerable targets.

Bright-line “do-not-ship” list

The highest-confidence prohibitions, where the evidence and the rubric converge — specific enough for a regulator to enforce and a studio to test against.

1Paid randomised rewards (loot boxes/gacha) offered to children, or in games rated for minors.
2Undisclosed probabilities on any paid randomised reward.
3Real-money cost obfuscation (multi-step currency laundering) targeting minors.
4Obstructed cancellation / refund and withdrawal “sludge” on recurring or large spends.
5Ads disguised as gameplay, and purchase-as-default UI in children's titles.
6Designs that individually profile and price to maximise a specific player's spend.

Five modes of adversarial design

A family of near-synonyms, separated by what exactly is wrong. They stack: one feature can be several at once.

Coercive

Intent: No (effect-based)

Removes, withholds, or penalises acceptable alternatives; applies pressure.

Operates on the choice set / freedom · e.g. Forced action; obstructed exit; withholding progression to compel pay; play-by-appointment.

Deceptive

Intent: No

Induces or exploits a false belief about a material fact.

Operates on beliefs (epistemic) · e.g. Hidden odds; disguised ads; value obfuscation.

Exploitative

Intent: No (effect-based)

Takes unfair advantage of an asymmetry or vulnerability for the provider's gain — even if the user is not deceived.

Operates on fairness / autonomy / vulnerability · e.g. Loot boxes; whale-targeting; SES-targeted monetisation.

Malicious

Intent: Yes (intent-laden)

Design deliberately built or deployed to work against the user's interest.

Operates on intent + effect · e.g. Patented spend-maximisation; covert data capture; 'malicious interface design'.

Manipulative

Intent: Usually covert

Bypasses or subverts rational agency via bias, emotion, or hidden influence.

Operates on the decision process · e.g. Near-miss; variable-ratio rewards; confirmshaming.