Steam UK Age Verification: Credit Card Only, No Selfie Scan

Steam UK age verification works in a way that surprises some people. Valve, the company behind Steam, relies on a bank's earlier age check rather than checking your age directly. Here is what that means for the card in your wallet, and for you at 11pm when a game page suddenly asks for it.

---

Steam UK Age Verification: What the Credit Card Check Asks For

Start with the why. Valve has introduced age verification for people in the UK because of the UK's Online Safety Act, a law that requires certain online services to protect children from harmful content. Plenty of services are requiring age verification now. Steam is rolling its version out with a very specific design, and Steam's efforts to comply look different from what you may have seen elsewhere.

Here is the rule in plain words. Steam now requires users who want 'mature game content' to prove they are adults. Valve has begun requesting a credit card for that proof. Steam accepts only a credit card, not a debit card, according to the FAQ that TechRaptor reported on. Once a valid credit card is stored on their account, the account counts as verified. Remove the card, and the verified status goes with it.

Steam age verification: why banking sits at the center

Why a credit card? Because of a legal chain. In the UK, you have to be at least 18 to get a credit card, and the company that issues the card must check your age before handing it over. So the bank has already checked the applicant's age. Steam uses the valid card as a proxy for adulthood, although that does not independently establish the age of whoever is using the account.

Ofcom, the UK regulator that enforces the law, backs this idea. As GameDeveloper reported, it describes credit card checks this way:

"one highly effective age assurance measure"

Ofcom, as reported by GameDeveloper

Think of a nightclub with two ways in. At the first door, a clipboard holder takes a selfie and guesses your age. Now a stranger has your face. At the second door, the bouncer checks that your card is valid and relies on the bank having checked the cardholder's age. Your face never changed hands. Steam picked the second door.

Is open banking part of the picture?

No, not according to the reporting I found. Open banking is a system where an app can see parts of your bank account with your permission. Nothing in the sources says Steam uses it. The method is much plainer: a stored credit card, and the bank's earlier age check standing in for Steam's own.

Why Steam UK Age Verification Takes a Card Instead of a Selfie for Mature Games

Valve has said it chose credit card checks to keep the "maximum degree of user privacy." To see why that matters, follow where your information travels in each method. This article is part of a series, start with Uk Shop Face Recognition Innocent Shoppers Named As Thieves.

With a face scan, your selfie may go to an outside verification company. That company runs it through software that estimates your age, then reports back to the platform. You, the vendor and the platform are now three parties holding pieces of a story about you. More hands means more places for something to go wrong.

And it does go wrong. According to reporting from Tech Policy Press, a cyberattack on a third-party vendor used by Discord exposed at least 70,000 images of government-issued IDs, including passports and driver's licenses. Those were collected to meet the UK's age rules. Separately, XIdent counts a billion records left open online at an identity-verification provider, with names, national ID numbers and birth dates. Nobody can change their face the way they can cancel a card.

That number, from the AgeCheck Index and summarized by UnixGaming, shows how common the selfie route is among those services. Steam's card-only approach differs from the most commonly offered method. Here is the contrast side by side.

Question	Credit card check	Face scan through an outside company
Who learns about you	Steam and a bank that already has the cardholder's banking records	A third-party checker that receives a selfie
What could leak in a breach	Card details tied to an account that unlocks mature games	Face images or, in an ID check, ID photos such as those in the 70,000 ID exposure
Who gets locked out	UK users with no valid credit card	Anyone unwilling to hand over a selfie
How common is it	Steam accepts only this method	The method most often offered across 32 UK services

I work at CaraComp, where face matching is the whole job, so I will say this plainly: a face is the one password you cannot reset. That is why avoiding the selfie handoff reduces exposure of biometric data, not just marketing.

The Misconception: You Already Buy With That Card, So What Changed?

Here is the thought some people have, and it is a reasonable one: "My card was already on file. Verification adds no new risk." For years, storing a card in Steam meant convenience. You tap, you pay, you play. So of course it feels like the same card doing the same job.

But the job changed. Before, the card was a payment tool. Now it is also your proof of adulthood. Your UK Steam account counts as verified only while a valid credit card stays on it. Delete the card and the proof disappears. Valve also says the stored card helps discourage several people from sharing one verified account.

Does that make your card less safe than yesterday? Nothing in my research says Steam's card handling got weaker. What changed is the role of the data. A stored card now also serves as evidence of the cardholder's age, though it does not establish who is using the account. That is why a quick safety habit is worth the 30 seconds. Previously in this series: App Store Age Verification 3 Questions On Storage Duration.

Safe habits before you download anything or type in a card number

You do not need to be a security expert for this. Think of it as two moves.

The first step is to start from the real place. Open the Steam app, or type the address yourself, rather than tapping a link in a message. Scammers love a moment when people feel rushed or confused by a new rule. A fake "verify your age" page can trick you into handing over card details. Do not download "age verification helpers" from anyone. The check happens inside your own account.

The second step is to look at your own account. Find the payment methods page and see which cards are stored there. Keep the one you actually mean to use. Remember that removing the card removes the verified status too, so decide on purpose. Then turn on card alerts in your banking app, so an unexpected charge can prompt you to check.

One more fact worth knowing: IGN reported that an August 2026 breach at a logistics partner exposed names, addresses, phone numbers and emails of some European customers who bought Steam hardware. That was shipping data, not card numbers, and it was not part of age checks. It shows that information held by companies around a platform can be exposed too. Be wary of emails pretending to be from "Steam support." You can find more privacy resources in CaraComp's education section.

Can UK users pass Steam age verification with a VPN?

The sources I read do not say a VPN helps. A VPN is a tool that makes your internet traffic look like it comes from another place. The reported check requires a credit card stored on your account; changing your apparent location does not itself provide one. Hunting for a way to bypass it can lead people to sketchy downloads.

Does another console platform work the same way?

I cannot tell you. This article covers only Steam, and my research does not cover other console platforms. If you play on a console, check that company's own help page and be just as careful about who gets your card details.

The Catch: Many UK Steam Users Have No Credit Card

Here is the part that makes the whole design more interesting than it first looks. A card check avoids a selfie handoff, but it also shuts people out. According to the figures in the research, 65% of UK adults owned a credit card in 2024. That leaves about 35% without one, roughly 19 million adults by the researcher's estimate.

Picture a 45-year-old who pays for everything with a debit card. In the UK, debit cards can be issued to people under 18, so Steam cannot treat them as proof of adulthood. That 45-year-old is plainly an adult, and still cannot see the mature pages through Steam's card check. The rule was built to keep kids out. It also keeps out grown-ups who do not have a credit card.

So Valve made a trade. A selfie route can give adults without credit cards another way in, but may send their faces to outside companies. The card route keeps faces out of the process but leaves adults without a card unable to use this check. Neither choice is free. Up next: Steam Uk Age Verification Credit Card Only No Selfie Scan.

---

So here is the question to carry to bed. If your card is now doing double duty as proof of your age, and a stranger sent you a "verify your Steam account" message tonight, would you know to ignore the link and open your own account first? The same card that avoids a selfie handoff also determines whether an adult without a credit card can get through.

Steam UK Age Verification: Frequently Asked Questions