Major adult platforms including Pornhub and Reddit must introduce advanced age verification under the Online Safety Act to block under-18s from accessing explicit content.
Why Is This Happening Now?
The UK’s Online Safety Act, passed in 2023, was designed to better protect children online, and one of its most high-profile provisions is now coming into force. For example, from 25 July, commercial pornography providers must implement “robust” age checks to stop minors from viewing explicit content. Media regulator Ofcom will oversee enforcement, and companies that don’t comply risk fines of up to £18 million or 10 per cent of global turnover.
Years of Warnings
The change comes after years of warnings about the ease with which children can currently access adult material. For example, a 2023 study commissioned by the UK government found that two-thirds of children aged 13–17 had seen online pornography, with many accessing it accidentally from mainstream sites. Until now, many porn sites only required users to click a box confirming they were over 18, a system Ofcom now calls “clearly insufficient”.
What the New Rules Require
Under the new law, pornographic sites must use “high assurance” age verification methods to prevent underage access. While they don’t need to identify users by name, they do need to check (reliably) that someone is over 18. The Act doesn’t mandate a single system, but Ofcom has recommended several approved methods.
Platforms must also ensure these checks are secure and privacy-preserving. If they fail to act, Ofcom has a range of enforcement options, from fines to blocking the site entirely within the UK. Payment providers and advertisers can also be ordered to withdraw support.
What Age Verification Methods Will Be Used?
In line with the new regulations, Ofcom has recommended a range of approved technologies that can be used to confirm someone’s age without necessarily revealing their identity. These include:
– Credit Card Checks. Users input card details, and a transaction is initiated to confirm the card is valid and held by an adult. Companies like Verifymy say they don’t share any personal information with the site itself, only returning a yes/no answer.
– Digital Identity Wallets. Digital ID apps such as Yoti or Luciditi allow users to store verified credentials (e.g., passport or driver’s licence data) and share only the necessary attribute, in this case, being over 18. The encrypted data remains under the user’s control.
– Facial Age Estimation. AI technology analyses a live photo or video to estimate whether a person is over 18. Yoti claims this can be accurate to within 1.5 years for most age groups. Critics say the idea of scanning faces to watch porn could deter users or raise privacy alarms.
– Mobile Network Checks. Some services can confirm age via a mobile phone contract, though pay-as-you-go users are often excluded.
– Open Banking Verification. By connecting to a user’s bank account, providers can check age without seeing transaction history. This option is privacy-focused but may feel excessive for users.
– Email Age Estimation. This method analyses where an email address has been used (e.g. with banks or energy firms) to estimate whether the user is likely to be an adult.
– Photo ID Uploads. Users upload a picture of a government-issued ID and a selfie. These are then matched to verify identity and age.
Each method comes with trade-offs in terms of accuracy, ease of use, and user privacy — and websites can use a combination to give users choice.
Who’s Implementing It And How?
Major adult platforms are now confirming their plans. Pornhub and several sister sites, owned by parent company Aylo, have announced they will adopt “government-approved age assurance methods”, though they haven’t specified which ones. Previously, Aylo withdrew access in some regions, such as Utah and Virginia in the US, after similar laws passed.
Reddit, meanwhile, is one of the first mainstream platforms to implement the new UK requirements. From 14 July, it began age-checking users who attempt to view “mature content” in the UK. It is using an external firm, Persona, which offers either a selfie scan or a passport photo upload. Reddit claims it won’t see the data itself, storing only a user’s date of birth and verification status.
Ofcom has welcomed these moves and warned that “other companies must now follow suit or face enforcement”.
Will It Work?
Supporters say the new rules are long overdue. Baroness Kidron, founder of the 5Rights Foundation, argues that age gates must be credible and secure if children are to be protected from harmful material. Ofcom estimates around 14 million UK adults access pornography online, and in their view, age checks can still allow legal adult access while excluding minors.
However, the plans have drawn criticism from civil liberties groups, privacy advocates, and digital policy experts.
Some argue the new rules set a troubling precedent for online freedom. David Greene, civil liberties director at the Electronic Frontier Foundation, described the legislation as a “tragedy”, warning that it effectively forces UK internet users to “show their papers” just to access lawful content.
Others question whether the approach will even be effective. Scott Babwah Brennen, of New York University’s Center on Technology Policy, noted that “there’s always going to be ways that kids can get around it,” and pointed to ongoing concerns about who collects verification data and how long it is retained.
Also, technology experts have warned that certain methods, such as facial age estimation or digital identity wallets, may feel disproportionate to the risk. While technically effective, these approaches risk normalising invasive identity checks for everyday online activities, potentially reshaping expectations around privacy across the internet.
Implications For Adult Content Providers
In terms of the implications for adult content providers, beyond the technical implementation costs, businesses risk losing traffic if users find the checks too intrusive. Some sites, like Pornhub in the US, have previously gone dark in protest at similar legislation.
In the UK, however, the financial penalties for non-compliance are now high enough to compel widespread implementation. Businesses may need to partner with certified age-checking firms, which will add another layer of cost, regulation, and liability.
Advertisers and payment processors are also under pressure. For example, Ofcom’s powers include ordering them to withdraw services from non-compliant sites, raising the stakes for the wider digital economy. For example, mainstream brands may need to re-evaluate where their ads appear and how age-gated content affects user flows.
What About Everyday Users?
For UK users, the experience of accessing adult content is about to change and possibly in ways that feel awkward or invasive. While age verification systems aim to be quick and anonymous, the requirement to share biometric data, ID scans, or bank access may put some people off entirely.
There are also broader concerns about data safety. For example, while verification firms like Yoti and Persona stress that they don’t store images or pass data to the adult sites, the reassurance will depend heavily on user trust and transparent processes.
As Iain Corby of the Age Verification Providers Association put it: “The only non-hackable database is no database at all.” However, even with privacy safeguards, the reality remains that the UK is about to become one of the first countries where accessing pornography will routinely require proof of adulthood.
What Does This Mean For Your Business?
Ofcom’s enforcement powers mean adult content providers now face direct commercial consequences for non-compliance, including fines, site blocks, and service withdrawal by payment processors or advertisers. Many will need to integrate external age assurance systems quickly, absorbing new costs and operational complexity while trying to retain user trust and engagement.
Mainstream platforms hosting adult or mature content are also affected. Reddit’s early adoption signals how widely these obligations apply, and more companies are likely to follow to avoid regulatory action. Businesses in adjacent sectors, including advertisers and mobile providers, will need to reassess how their services intersect with regulated content and whether their current systems meet Ofcom’s standards.
For users, the experience of accessing adult material will now become more controlled, and in some cases, more uncomfortable. While most verification systems avoid full identity disclosure, the requirement to submit a facial scan, ID image or bank-linked account introduces friction that didn’t previously exist. It’s likely that some users may withdraw entirely or turn to alternative platforms, raising questions about the law’s effectiveness.
From a business perspective, the changes signal a wider move towards regulated digital identity checks across age-restricted services where pornography is simply the first and most obvious test case. Online gambling, social platforms, and even e-commerce providers selling restricted goods may face similar expectations in the near future. For UK firms, especially those working with younger audiences or regulated content, this shift will demand investment in age assurance, transparency, and user communication, or risk falling foul of a new era of digital accountability.
