There is a sentence that appears in roughly one in three product briefs, and it has done more quiet damage than any other sentence in the industry. Make the signup frictionless.

It sounds unarguable. Every field removed is a conversion point gained, every tap saved is a user retained, and the arithmetic of the funnel supports the instinct at every step. The trouble is that the funnel only measures the people who arrive. It has nothing to say about who they were, whether they came back, or whether the business was better off for having acquired them. Meanwhile, an entire category of product has spent a decade being legally forbidden from removing friction, and has consequently learned things about it that the rest of the industry has not.

The Cult of the Frictionless Signup

The frictionless doctrine emerged from a specific context and was then generalised well past its usefulness.

For a free consumer app funded by scale, removing every barrier is straightforwardly correct. The marginal user costs nothing, the product is the same for everyone, and the only question is how many you can get through the door. Under those conditions, each additional form field is a tax with no offsetting benefit.

Almost nothing works like that. The moment a product involves money, identity, liability, a physical good, or a relationship expected to last longer than a fortnight, the marginal user stops being free. Some of them are expensive. Some are actively unprofitable. A signup flow that admits everyone is a signup flow that has declined to make a decision, and the decision does not disappear; it merely relocates to your support team.

Where Friction Is Not Optional

Consider a sector that cannot make this mistake because the law will not permit it.

Open the MrQ mobile casino on a phone, or any operator holding a Gambling Commission licence, and at some point you will be asked to prove who you are before you can do anything of consequence. Age verification, identity checks, and a body of conditions attached to the licence itself. MrQ has run this way since 2018, and it has no choice: an operator that quietly relaxed its checks to lift conversion would not have a conversion problem for long, because it would not have a licence.

That constraint is instructive precisely because it removed an option that everyone else still has. Growth teams in unregulated categories can always relieve pressure by loosening the gate. Regulated teams cannot, so they were forced to solve the harder problem, which is not how to remove friction but where to put it.

Friction Placed Well Is Not Felt

The finding, arrived at independently across finance, healthcare and gaming, is that users do not object to effort. They object to unexplained effort, badly timed.

Three principles follow, and none of them is proprietary.

Sequence by cost. Ask for the cheap, low-commitment information first, and defer the expensive ask until the user has seen enough value to want to pay it. Nobody uploads a passport photograph to a product they have not yet understood.

Explain in the moment. A field labelled “date of birth” with no rationale reads as data harvesting. The same field with one line of explanation reads as a legal requirement, which it is. The work of the sentence is enormous and its cost is nothing.

Never surprise. The single most reliable way to lose someone is to spring a verification step after they believed the process had finished. The research literature on form design, much of it collected by the Nielsen Norman Group, keeps returning to the same point: perceived length matters more than actual length, and perceived length is a function of expectation.

The Abandonment Number Nobody Publishes

Here is a diagnostic worth running on any product you work on.

Compare completion rate at signup with retention at day thirty. If the first is excellent and the second is dismal, the signup is not converting. It is filtering nothing, and the cost of that failure lands somewhere else on the balance sheet, generally as support volume, chargebacks, or a customer base that looks impressive in a board deck and generates nothing.

Regulated products have an unfair advantage in this analysis, because they can see it. The verification step is a hard boundary, and everyone on the far side of it is a real, identified, adult human being who wanted to be there. The metric is honest by construction.

Onboarding in Regulated Sectors

What the Compliance Team Is Actually Protecting

Most product organisations treat compliance as an antagonist, and most compliance teams have quietly accepted the role.

This is a failure of framing on both sides. The requirements exist because somebody was harmed, generally repeatedly, and the rule is the residue of that harm. A verification step is not an arbitrary obstacle; it is an encoded lesson, and the encoding is usually accurate even when the implementation is clumsy.

The practical consequence for a product team is that compliance should sit in the design review rather than at the end of it. A requirement discovered in week ten is a redesign. The same requirement understood in week one is a constraint, and constraints improve work. Everybody in this industry says that about brand guidelines and nobody says it about the law.

Designing for the Second Session

The metric that matters is not whether somebody completed your signup. It is whether they returned.

Friction, correctly placed, selects for people who wanted the thing. It also signals seriousness, which is why nobody trusts a bank that lets you open an account in eleven seconds. The sectors compelled to make their onboarding rigorous discovered, largely by accident, that rigour is a feature, and that users read it as one when it is explained.

Remove friction that serves nobody. Keep friction that protects somebody, and say who. That is the entire lesson, it cost the regulated industries a decade and a great deal of money to learn, and it is available to the rest of us for free.