Editing AirAsia (section)

===Multi-step friction to unsubscribe from AirAsia marketing spam===
Since most users will learn about the spam later, the unsubscribe process is in reality an 8-step process that takes eight clicks and user login, instead of the three suggested by AirAsia's Privacy Statement page:
#User clicks on unsubscribe button at bottom of AirAsia promotional email.
#Instead of directly unsubscribing the user or bringing them to an unsubscribe confirmation page, users are instead linked to their account "Notification Preferences" page where they have to log in.
#After entering their log-in details, users have to also input a [[one-time password]] (OTP). This step takes at least five additional clicks, where the user has to:
##Click on their email tab or client (assuming they have it opened)
##Click on the AirAsia OTP email (if they do not receive it immediately, refreshing may incur additional clicks)
##Copy or remember the OTP, and click back to the AirAsia login tab
##Paste the OTP into the form
##Click continue
#User is now on their Notification Preferences page where they get to see the 23 different types of AirAsia spam they never knew they opted into. Assuming they never wanted and don't want to continue receiving any of these spam emails, they would click on "Pause all emails".
#User also has to click on "Pause all communications" if they wanted to stop spam from coming in through push notifications and WhatsApp.
##Another [[dark pattern]] here from AirAsia is "Pause all communications," which implies the user would stop receiving any communications whatsoever. Users would typically want their booking emails, travel itinerary, etc., so they would not think of selecting this option.
##The fine print above this button says, "Your account activities, transactional updates, payment updates, booking and delivery information are compulsory," meaning such emails will be delivered in any case and "communications" in "Pause all communications" really refers to promotional and marketing spam.