Sneak Into Basket
AKA: Cart Stuffing · The Pre-Selected Add-On · The Uninvited Guest in Your Checkout
Bureau Classification
What It Does
Sneak Into Basket places additional items, services, insurance products, or donations into a user's shopping cart or order without explicit selection by the user. The user decides to buy Product A; by the time they reach checkout, they are also buying Travel Insurance, a "Premium Membership Trial," a charity donation, and event parking. Each addition was enabled by a pre-checked box, a default toggle, or an interface design that made "add this" the path of least resistance. The user who reads carefully and removes each item will not be charged; the user who doesn't notice or doesn't want to spend time removing things will pay for items they never chose. The pattern is calibrated to maximize the non-reading majority.
Why It Works
Cognitive tunneling — focused attention on the primary task — causes users to miss peripheral interface elements. When buying a concert ticket, the user's attention is on the ticket price, the seats, the date. The insurance checkbox to the right of the seat selector is background noise, processed only if the user specifically allocates attention to it. The default-selected state means that inattention results in purchase. The pattern also exploits completion pressure at checkout: users who have reached the payment stage have a strong motivation to complete the transaction and are less likely to pause and audit their basket than they were earlier in the flow.
How To Spot It
Audit your basket before every purchase. Scroll through the order summary at checkout and verify that every item listed was explicitly selected by you. Look for service products (insurance, protection plans, memberships) that appear alongside physical or event tickets — these are common Sneak Into Basket targets. Check the final order total against what you expected to pay; a significant discrepancy warrants investigation.
Documented Incidents
Ticketmaster: event ticket purchases routinely include pre-selected ticket insurance requiring active removal, in addition to unavoidable service fees
Ryanair: travel insurance pre-selected by default during flight booking, requiring specific navigation to deselect
Amazon: "Subscribe & Save" options sometimes defaulted when similar items were previously on subscription
UK supermarkets: charity donations pre-added to online grocery orders requiring removal
Utility comparison sites: additional products pre-selected during the "comparison" flow that turn out to be upsells from partner providers
Body Count
No comprehensive industry figure exists, because the sneak items are often low-cost enough that users don't notice or don't bother disputing individual charges. The Bureau estimates that the aggregate revenue from unrequested cart items across e-commerce runs to hundreds of millions of dollars annually in the UK alone, based on consumer protection authority estimates.
Legal Status
The EU Consumer Rights Directive explicitly prohibits pre-ticked boxes as a means of obtaining consent to purchase additional services. This was a response to the near-universal use of pre-selected insurance and add-ons in travel booking. UK consumer protection law has similar provisions. Enforcement has produced regulatory guidance more frequently than it has produced fines, but the legal standard is clear: anything added to a basket must be actively chosen, not actively removed.
Bureau Verdict
"Sneak Into Basket is a felony because it represents an unauthorized purchase — a transaction to which one party did not consent — disguised as a UI default. The Bureau notes that the same companies who deploy this pattern would describe it as "relevant offers presented at the point of purchase," a description that technically excludes the relevant detail that the relevant offer added itself."
— Bureau of Non-Consensual Cookie Bandits
Frequently Asked Questions
Companies Caught Using This Pattern
Full audits available in the Privacy Policy Hall of Shame.