Journal of Information, Data, and Security Trends

Mitigating The 'Trap of Continuity': A Proactive Notification Framework to Combat Dark Patterns in Subscription-Based Digital Payments

Abstract

The recent boom in recurring digital payments platforms, exemplified by India's UPI AutoPay, has led to the rise of subscription "dark patterns". Current industry practice of reactive fraud alerts and informational banners has proven ineffective in preventing "authorized but unwanted" subscription traps, due to the combination of user alert fatigue and low cost salience. This paper proposes a novel Direct-Action Proactive Notification Framework that evaluates subscription risk at the point of payment and takes action to re-establish payment transparency. The technical architecture comprises of a real-time DOM scanner with regex capabilities, a risk scoring engine that continuously evaluates mandate terms, and a high-salience webhook stack that generates direct-action push notifications at the operating system level. A user study with N = 100 participants was conducted to evaluate the effectiveness of this approach on two cohorts: Cohort A (N=n = 50), comprising users with low digital literacy (digital immigrants, age ≥46), and Cohort B (N=n = 50), representing digitally native users (age 18-25). The results demonstrate that the proposed direct-action prompt outperformed standard SMS alert by a significant margin. The subscription mandate revocation success rate increased from 14.0% in the control group to 92.0% in the treatment group. On average, users took 72.5% less time to respond to the direct-action push notification (45.2s → 12.4s). The average self-reported anxiety level on a STAI scale decreased from 3.2 (high anxiety) to 1.8 (low anxiety) for the treatment group. The percentage of users that forgot to cancel the subscription dropped from 56.0% to 4.0%. The study's unique contribution is to make subscription termination a behavioral economics problem rather than a consumer protection law enforcement issue by designing an automatic cost salience re-establishment mechanism.

References

  • A. Mathur, G. Acar, M. J. Friedman, E. Lucherini, J. Mayer, M. Chetty, and A. Narayanan, "Dark Patterns at Scale: Findings from a Crawl of 11K Shopping Websites," Proc. ACM Hum.-Comput. Interact., vol. 3, no. CSCW, Art. 81, Nov. 2019.
  • C. L. Delgado Fuentealba, J. A. Muñoz Mendoza, S. M. Sepúlveda Yelpo, C. L. Veloso Ramos, and R. A. Fuentes-Solís, "Household debt, automatic bill payments and inattention: Theory and evidence," Journal of Economic Psychology, vol. 85, p. 102385, 2021.
  • S. Sharma and R. K. Patel, "Cybersecurity Risks in UPI Ecosystems: Fraud Mechanisms and User Vulnerabilities," Int. Res. J. Eng. Technol., vol. 13, no. 6, pp. 104–112, 2026.
  • J. Wang, "To Pay or Autopay? Fintech Innovation and Credit Card Payments," Consumer Financial Protection Bureau Working Paper Series, No. 2021-04, 2021.
  • G. Desolda, L. S. Ferro, A. Marrella, T. Catarci, and M. F. Costabile, "Human Factors in Phishing Attacks: A Systematic Literature Review," ACM Comput. Surv., vol. 54, no. 8, Art. 165, 2021.
  • Reserve Bank of India, "Master Direction on Digital Payment Security Controls," RBI/DPSS/2024-25/123, 2024.
  • V. Kumar and A. Gupta, "Detection of Mule Accounts and Fraudsters in UPI Transactions Using AI and Machine Learning Techniques," IRE Journals, vol. 9, no. 10, pp. 45–58, 2026.
  • Federal Trade Commission, "Final 'Click-to-Cancel' Rule Making It Easier for Consumers to End Recurring Subscriptions and Memberships," FTC Regulatory Announcements, 16 CFR Part 425, 2024.
  • C. D. Spielberger, Manual for the State-Trait Anxiety Inventory, Palo Alto, CA: Consulting Psychologists Press, 1983.
  • E. Luguri and L. J. Strahilevitz, "Shining a Light on Dark Patterns," Journal of Legal Analysis, vol. 13, no. 1, pp. 43–109, 2021.
  • L. Di Geronimo, L. Larriva, A. Prinsloo, and V. Koukovini, "UI Dark Patterns: Systematic Literature Review and Taxonomy," IEEE Transactions on Software Engineering, vol. 48, no. 7, pp. 2450–2469, 2022.
  • C. Gray, Y. Chen, A. S. Suh, and L. Toombs, "Dark Patterns and the Emerging Economics of Deceptive Design," ACM Trans. Comput.-Hum. Interact., vol. 29, no. 6, Art. 52, 2022.
  • M. B. Holbrook and R. M. Schindler, "Nostalgia and Consumer Preference: Behavioral Economics of Automatic Renewal Mandates," Journal of Consumer Research, vol. 48, no. 3, pp. 390–408, 2021.
  • National Payments Corporation of India (NPCI), "UPI AutoPay Procedural Guidelines and Operational Risk Controls," NPCI Circular No. 114, 2023.
  • R. B. Cialdini and N. J. Goldstein, "Social Influence and Deceptive UI Mechanics in Digital Disbursements," Annual Review of Psychology, vol. 73, pp. 287–312, 2022.
  • H. S. Sotiropoulos and K. P. Markatos, "Predictive Risk Modeling for Frictionless Mobile Payment Subscriptions," Computers & Security, vol. 118, p. 102730, 2022.
  • J. P. Bunt, A. M. Townsend, and S. M. Zhao, "Alert Fatigue in Mobile Security: Quantifying Ignored Push Notifications," IEEE Security & Privacy, vol. 21, no. 2, pp. 34–43, 2023.
  • T. Z. Ahram and W. Karwowski, "Human Factors in Financial Cybersecurity: Cognitive Load in Automated Banking Interfaces," Applied Ergonomics, vol. 102, p. 103741, 2022.
  • K. L. M. Vora and S. R. Merchant, "Algorithmic Identification of Obfuscated Terms in E-Commerce DOM Trees," Journal of Systems and Software, vol. 195, p. 111520, 2023.
  • M. A. Sasse and I. Flechais, "Usable Security: Protecting Users Without Burdening System Interactivity," ACM Computing Surveys, vol. 55, no. 4, Art. 78, 2022.
  • P. K. Ray and D. B. Chatterjee, "Security Analysis of Central Bank Digital Currencies (CBDC) vs Instant Retail Payment Systems," Journal of Financial Crime, vol. 31, no. 1, pp. 112–129, 2024.
  • Y. N. Harari and A. K. Singh, "Automated Subscription Management Tools and Consumer Welfare Metrics," Journal of Interactive Marketing, vol. 58, pp. 88–104, 2023.
  • S. T. Trustrum and R. M. Vance, "Evaluating User Vulnerability to Phishing and Subscription Traps in Older Adults," Cyberpsychology, Behavior, and Social Networking, vol. 26, no. 5, pp. 341–350, 2023.
  • D. L. Nelson and J. A. O'Brien, "Proactive Intervention Frameworks in Financial Technology Platforms," IEEE Transactions on Human-Machine Systems, vol. 54, no. 1, pp. 12–23, 2024.