Shadiest growth hack you've seen?

Just saw an app tricking users into a paid sub by making the close button almost invisible. Got me thinking about all the dark patterns PMs pull just to hit metrics.

At an old org we basically spammed a user's entire address book if they accidentally clicked allow during onboarding. Felt terrible but leadership loved the DAU bump lol.

What is the most unethical growth hack or feature you guys have built or seen?