Short answer
Under the UK’s Online Safety Act, regulated by Ofcom, services that allow pornography or other content harmful to children have had to use “highly effective age assurance” for UK users since 25 July 2025. That is why social apps, forums, dating and gaming services now ask some UK users to prove they are adults. Ofcom’s accepted methods include facial age estimation, photo-ID matching, open banking, mobile-network checks, credit-card checks, digital ID services and email-based age estimation; ticking a box with your birthday no longer counts. Choose the method that shares the least about you, do it only inside the official app or site, and treat any message telling you to “verify your age” through a link as phishing. Companies can be fined up to £18 million or 10% of worldwide revenue.
What changed in the UK
| Date | What happened |
|---|---|
| 17 January 2025 | Sites publishing their own pornographic content had to introduce robust age checks |
| 17 March 2025 | Ofcom could start enforcing the illegal-content duties on all user-to-user and search services |
| 25 July 2025 | Services that allow pornography or other content harmful to children must have highly effective age assurance |
| Penalties | Fines of up to £18 million or 10% of qualifying worldwide revenue, whichever is greater |
The Act applies to services used in the UK, wherever the company is based. It doesn’t apply in the EU, where the Digital Services Act requires platforms used by minors to ensure their privacy, safety and security and bans ads based on profiling minors.
The age-check methods Ofcom accepts
Ofcom gives a non-exhaustive list of methods that can be highly effective, and says self-declaration and online payments that don’t require the payer to be 18 are not. In its review of how services use age assurance, facial age estimation and photo-ID matching were the most common, often combined with a back-up method.
| Method | What you share | Tip |
|---|---|---|
| Facial age estimation | A selfie or short video analysed to estimate your age | Check whether the image is deleted after the check |
| Photo-ID matching | An identity document plus a selfie compared with it | Only inside the official app or site, never by chat or email |
| Open banking | Your consent for your bank to confirm you are an adult | The bank shares age information, not your transactions |
| Mobile network operator check | Confirmation from your mobile provider that your line has no age restriction | Works only for the number in your own name |
| Credit card check | A credit card, which UK issuers give only to adults | Watch for unexpected charges afterwards |
| Digital identity service | A reusable digital ID app that confirms you are over 18 | One check can be reused across services |
| Email-based age estimation | Your email address, assessed from its use with other services | Usually the least data, if it is offered |
If a check locks you out or gets your age wrong
- Try another method: most services offer more than one, so if facial estimation misjudges you, switch to an ID or bank check.
- Use the platform’s own appeal or support and keep screenshots of the error and the date.
- Don’t open a second account to get round a restriction: platforms treat that as ban evasion and it can make things worse.
- On Instagram, age checks follow Meta’s own process; see Instagram age verification and the video selfie check.
If an age check was the start of a wider lock-out or suspension, our account recovery work covers the appeal.
Protect your data — and spot fake age checks
- Start the check from the app or site yourself. Scammers send emails and DMs saying “verify your age or your account will be deleted” that lead to fake pages collecting ID scans and card details. See how to report phishing.
- Read what happens to your image or document: reputable providers say whether data is deleted after the check.
- Prefer the method that shares least when you have a choice: an estimate rather than a document.
- Complain to the ICO if you think age-check data was misused; the ICO recommends raising it with the organisation first (helpline 0303 123 1113).
Reporting harmful content in the UK and the EU
In the UK, every user-to-user and search service must have systems to remove illegal content when it is flagged, and the largest services must offer effective reporting and redress for how they enforce their terms. Ofcom supervises those systems and can act against companies that fail. In the EU, the Digital Services Act gives you a formal notice route and appeal rights; see reporting illegal content in the EU and appeal rights under the DSA.
Frequently asked questions
Why is an app asking me to verify my age in the UK?
Since 25 July 2025, UK users of services that allow pornography or other content harmful to children must pass a highly effective age check under the Online Safety Act. Many social, dating and gaming apps fall in scope for some features.
Can I just enter my date of birth?
Not for these services. Ofcom says self-declaration of age is not highly effective; accepted methods include facial estimation, photo ID, open banking, mobile-network and credit-card checks, digital ID and email-based estimation.
Does the Online Safety Act apply in the EU?
No. It is UK law. In the EU, the Digital Services Act requires platforms used by minors to protect their privacy, safety and security, and some member states have their own age rules.
I got a message telling me to verify my age through a link. Is it real?
Treat it as phishing. Close the message, open the app or website yourself and check there whether any verification is needed.
Sources: GOV.UK — Online Safety Act explainer, Ofcom — age checks to protect children online, Ofcom — online age checks now in force, ICO — data protection complaints