A foreign SaaS company launches in Korea with a familiar growth playbook: a free trial, automatic conversion to a paid plan, optional add-ons pre-selected at checkout, and a retention screen that makes cancellation possible but inconvenient. In many markets, this may be treated mainly as a UX or customer-success issue. Under the Korea dark pattern rules, it is now a regulatory risk that can trigger Korea Fair Trade Commission scrutiny, corrective orders, business suspension, and administrative fines.

This matters because Korea is not treating dark patterns as a vague ethical concept. Since February 14, 2025, amendments to the Act on the Consumer Protection in Electronic Commerce, Etc. have identified specific online interface practices that e-commerce businesses must avoid. The KFTC has also issued enforcement guidance explaining how subscription renewals, drip pricing, default selections, cancellation flows, and repeated pop-ups should be assessed.

For foreign companies, the compliance question is practical: does your global checkout, Korean landing page, app subscription journey, marketplace seller page, or digital financial product flow need a Korea-specific redesign? In 2026, the answer is often yes, especially if the Korean user sees Korean-language marketing, pays through a Korean-facing payment flow, or receives services through a platform targeting Korean consumers.

Korea Dark Pattern Rules: What Changed in 2025 and 2026

The core statute is the Act on the Consumer Protection in Electronic Commerce, Etc. (the E-Commerce Act). The 2024 amendment took effect on February 14, 2025, and the KFTC followed with amendments to subordinate regulations and a Q&A document interpreting the new obligations.

The law now addresses six categories of dark patterns. One category, hidden renewals, is addressed through Article 13(6) of the E-Commerce Act, which requires prior consumer consent when a subscription fee is increased or a free service is converted to a paid service. The other five categories are prohibited under Article 21-2 of the E-Commerce Act: gradual disclosure of costs, pre-selection of purchase options, false hierarchies, obstruction of cancellation or withdrawal, and repeated interference.

The enforcement framework is more concrete than many foreign operators expect. According to KFTC guidance summarized by Korean law firms and market institutions, violations can lead to corrective orders, administrative fines, and business suspension. The subordinate rules provide escalating consequences by number of violations, including business suspension periods of three, six, and twelve months, and administrative fines that are roughly in the low hundreds to several thousand USD depending on the violation count. The reputational and operational risk may be more significant than the fine itself, particularly for platforms that depend on app stores, payment partners, Korean advertisers, or institutional investors.

Korea’s approach is comparable to the EU and UK trend of treating manipulative interface design as consumer protection misconduct, but Korea’s rule set is more prescriptive in certain areas. The law does not merely say that design should be “fair.” It identifies concrete patterns that product, legal, growth, and engineering teams can test against.

Korea Dark Pattern Rules for Subscriptions and Pricing

The highest-risk area for foreign digital businesses is the subscription journey. A common example is a one-month free trial that converts to a paid plan unless the user cancels. Under Article 13(6) of the E-Commerce Act, a provider must obtain consumer consent within the prescribed period before increasing the subscription fee or converting a free service to a paid service.

KFTC guidance indicates that this consent should be obtained within 30 days before the payment date. If a free trial starts on May 1 and converts to paid service on June 1, a generic consent collected at sign-up may not be enough. The provider should obtain separate consent in the 30-day window before the payment date, and “deemed consent” through silence or failure to opt out may be vulnerable under Korean standardized contract principles.

For foreign SaaS, streaming, app, education, cloud, and membership businesses, this is a major change. Many global flows rely on a single initial consent, reminder emails, or a cancellation link in account settings. Korea may require a more affirmative consent step before the actual payment conversion.

The second major pricing rule is gradual disclosure of costs, often called drip pricing. Article 21-2 targets cases where a business displays a lower price at the first stage and reveals mandatory fees only near checkout without a justifiable reason. The KFTC’s position is that the total amount the consumer must pay should generally appear on the first screen that refers to price.

For example, assume a foreign travel platform advertises a hotel room for $120 on a Korean search-results page, then adds mandatory service fees, cleaning fees, platform fees, and taxes only at the final payment page. If those fees were mandatory and reasonably knowable, the Korean rule may treat the first-screen price as misleading. If some fees depend on consumer choices or location, the business should clearly identify the excluded cost items and explain why the final amount cannot be calculated immediately.

This is not only a retail issue. B2B marketplaces, booking platforms, cloud marketplaces, ticketing platforms, fintech apps, and cross-border e-commerce storefronts should examine how Korean users first encounter prices. The first price impression matters.

UX Design, Defaults, and Cancellation Under Korea Dark Pattern Rules

Article 21-2 also regulates interface design choices that may feel ordinary to growth teams but problematic to regulators.

The first is pre-selection of purchase options. If a checkout screen asks whether the user wants an add-on, premium delivery, insurance, data package, warranty, or paid support plan, the platform should not pre-select “yes” in a way that induces purchase. There is room for practical defaults, such as a saved delivery address selected for convenience. But a default that adds an extra purchase is different from a default that reduces friction for a previously chosen transaction.

The second is false hierarchy. A design may be risky if it visually emphasizes the option that benefits the seller while making the consumer-friendly option smaller, faded, hidden, or difficult to identify. A bright “Continue Premium” button next to a gray, low-contrast “Keep Basic Plan” link may be reviewed not only as design persuasion but as a regulated purchasing interface.

The third is obstruction of cancellation or withdrawal. Korean regulators compare the purchase or subscription path with the cancellation path. If sign-up takes two clicks but cancellation requires six screens, a customer-service call, a hidden menu, and repeated retention prompts, the design may be challenged unless there is a justifiable reason. The KFTC considers both quantitative factors, such as the number of steps, and qualitative factors, such as how easy the cancellation link is to find.

The fourth is repeated interference. A platform should not repeatedly ask consumers to change a selection they have already made. If the user clicks “no,” “cancel,” or “do not subscribe,” repeated pop-ups asking the same question can become risky. KFTC guidance recognizes limited exceptions, such as allowing users to avoid further prompts for a defined period, but the default assumption should be that one clear refusal deserves respect.

These rules require coordination between legal and product teams. A contract clause saying “users may cancel at any time” will not fix an app flow that buries the cancellation button. Conversely, a clean UX record can help demonstrate good-faith compliance if the KFTC asks questions.

Practical Compliance Steps for Foreign Companies

Foreign businesses should treat the Korea dark pattern rules as a product compliance project, not just a legal memo. The best process starts with screenshots, user journeys, and evidence of actual Korean-facing flows.

Begin with a Korea UI audit. Capture the complete user journey from ad click or app-store page to purchase, renewal, account settings, cancellation, refund request, and customer support. Do this on mobile as well as desktop because Korean enforcement discussions emphasize the greater risk of consumer confusion on small screens.

Next, map each screen against the six regulated categories:

Hidden renewals: Does any free trial convert to a paid plan? Does any subscription price increase? Is affirmative consent collected within the required timing before payment?
Drip pricing: Does the first price screen include mandatory fees, taxes, service charges, installation charges, shipping charges, or platform fees?
Pre-selected options: Are paid add-ons, subscriptions, insurance products, or marketing consents pre-ticked?
False hierarchy: Are consumer-friendly choices visually weaker than seller-friendly choices in size, color, placement, or contrast?
Cancellation hindrance: Is cancellation materially harder than purchase, either in step count or in practical accessibility?
Repeated interference: Does the platform repeatedly pressure a user after a refusal, cancellation request, or opt-out?

Then decide whether Korea needs a localized flow. Many global companies prefer a single worldwide checkout, but that approach can be inefficient where Korean rules are more specific. A Korea-specific consent screen, price display module, cancellation shortcut, or renewal notice may be cheaper than defending a regulatory inquiry.

Companies should also update internal documents. Product requirement documents, growth experiment templates, A/B testing rules, influencer campaign manuals, and customer-support scripts should include Korean dark pattern review checkpoints. If the business already maintains PIPA privacy review, Korean marketing consent review, or e-commerce terms review, add dark-pattern testing to the same approval workflow.

Finally, preserve evidence. If the company changes a cancellation flow, records the rationale for a pricing display, or rejects an A/B test because it could be seen as a false hierarchy, keep that record. In a KFTC inquiry, contemporaneous compliance documentation is more persuasive than after-the-fact explanations.

Key Takeaways for 2026

Korea now has specific statutory rules against six online dark patterns, not just general guidance.
Article 13(6) of the E-Commerce Act is especially important for free trials, subscription price increases, and free-to-paid conversions.
Article 21-2 of the E-Commerce Act targets drip pricing, pre-selected paid options, false hierarchy designs, cancellation obstruction, and repeated interference.
Foreign companies should review Korean user journeys on mobile and desktop, including ads, landing pages, checkout, renewal notices, cancellation, and refund flows.
A Korean-facing product may need a localized consent and cancellation design even if the global product flow is lawful elsewhere.
Related compliance areas include PIPA consent, marketing-message rules, e-commerce terms, payment-service arrangements, and consumer complaint handling.

Conclusion

The Korea dark pattern rules are a clear signal that online UX is now a legal compliance issue in Korea. For foreign companies, the practical risk is not limited to consumer apps. SaaS platforms, marketplaces, fintech services, digital content providers, travel platforms, and cross-border e-commerce brands can all be affected if their Korean-facing interface steers consumers through unclear pricing, default purchases, hidden renewals, or difficult cancellation paths.

The right response is early product review. Korea Business Hub can assist foreign businesses with E-Commerce Act compliance, Korean terms and conditions, subscription-flow review, PIPA and marketing consent, and broader regulatory planning for launching or scaling digital services in Korea.

Korea Dark Pattern Rules 2026: E-Commerce Compliance Guide