Age verification laws: 25+ states now demand ID and face scans

Quick answer
What is age verification and how does it work online?
Age verification is a check that a website or app uses to confirm a visitor is old enough, often by scanning a government ID or a face. It began with adult sites in Louisiana in 2022. Since then, a large and growing group of states has extended similar rules to social media.
Picture this. You open a website at 11pm, and it asks you to prove your age. Not just click "I'm over 18." Actually prove it, with a photo of your driver's license or a scan of your face. That is age verification now, and it is no longer limited to adult sites.
Age verification was sold as a way to protect kids, but it is turning into a system that asks ordinary adults to hand over ID again and again, and the real question is whether safeguards can exist without turning private browsing into paperwork.
Age Verification Is Spreading: What Started in Louisiana Is Now Everywhere
Here is the short history. In 2022, Louisiana became the first state to try an age verification law for adult websites. It looked like a one-state experiment. It was not.
According to State of Surveillance, more than 25 U.S. states now require digital identity checks for pornography and social media. The Supreme Court then ruled that adults have no First Amendment right to avoid age verification. That ruling gave states a green light, and they ran with it.
25+
U.S. states now require digital identity checks for adult content and social media
Source: State of Surveillance This article is part of a series, start with Atlantic City Hotels Own Face Costs Star Hotel Guest 1 250.
Online age checks are creeping past adult sites
The scope keeps growing. Rules that began with explicit material now reach social media, account sign-ups, and even algorithm-driven feeds (the "recommended for you" stuff). Lawmakers have already floated bills that would require ID checks for things like skincare products and diet supplements. Skincare. Let that sink in.
Nobody is saying kids don't need protection. They do. But once the machinery exists, it is easy to point it at something new.
What Online Age Checks Actually Ask You to Hand Over
Many of these checks work by scanning your face or your ID. That means biometric data (your face, voice, fingerprints, the body stuff that is uniquely you) plus personal documents. You are trusting a third-party company to hold it safely.
That trust has already been tested. Discord lost 70,000 ID photos in October 2025, according to the research behind this story. Think about that. Your face next to your government ID, sitting in a database that leaked.
| Old way | New way |
|---|---|
| Click a box saying you are 18, no age verification needed | Upload an ID or face scan to pass an age check |
| Only a few adult sites were affected by age verification laws | Over 25 states have enacted rules that reach social media too |
| Nothing stored about you | Documents and biometric data held by verification companies |
| A leak exposed an email address | A leak can expose your face and your ID together |
Who gets locked out by age verification laws?
The systems are not fair to everyone. Tech Policy Press reports that current methods are likely biased against trans people, cutting them off from large parts of the internet. A face scan or an ID that does not match how someone looks can simply fail.
Age verification systems' effectiveness is more often presumed than proven.
Research summary on age verification, ArXiv
Read that again. We are building all this, and nobody has shown it reliably works against someone determined to get around it. Previously in this series: Age Verification 25 States Now Demand Id And Face Scans.
Do Age Verification Laws Actually Work? The VPN Clue
Short answer: not the way sold. A VPN (a tool that hides where you are connecting from) is a common workaround. After Florida's law took effect, demand for VPNs jumped 1,150%, according to the Electronic Frontier Foundation. In the UK, the Online Safety Act brought a similar VPN surge, plus reports of news and journalism getting blocked by mistake.
So ordinary adults are voting with their behavior. Many would rather hide than hand over an ID. That is a sign the trade feels wrong to a lot of people.
Why Age Verification Matters Beyond Kids' Safety
- Breach risk: your ID and face become a target for hackers and resale.
- Scope creep: "harmful to minors" can be redefined to cover news, health, and community spaces.
- Uneven fairness: some groups get blocked more often than others.
Is there a fairer middle ground?
Yes, in theory. Attribute-based checks let you prove "I am over 18" without revealing your name or birth date. It is the digital version of a bouncer glancing at your card and not writing anything down. The catch, per the research, is that few companies use it, and voluntary standards rarely win when money points the other way.
What You Can Do Before You Hand Over Your ID
If you have ever wondered whether a photo, profile, or person is really who they claim to be, that is the exact question identity tech exists to answer. It cuts both ways, though. The same tools that confirm a face can also collect it.
So here is one useful habit. Before you upload anything, ask: who keeps this, and for how long? If the site cannot tell you plainly, or if it asks for a full ID when a simple age-only check would do, treat that as a yellow flag. Pick the lightest option on offer.
Also watch the device level. The research notes that California's law now requires browsers and app stores to collect your birth date. Once age data lives on your phone, what stops it from being linked to your purchases, searches, and social profiles later?
Age verification can protect kids, but online age checks must not become a blank check that makes adults prove who they are every time they browse. Up next: Age Verification 25 States Now Demand Id And Face Scans.
Recap: Age checks were meant to protect children, yet they now ask ordinary adults for ID again and again. The question is whether safeguards can exist without turning private browsing into paperwork.
Here is the line I keep coming back to. Florida residents bought VPNs by the millions to avoid a system built to protect them. When the people being protected run for the exits, whose safety is the system really built for?
Age Verification: Frequently Asked Questions
What are age verification laws?
Age verification laws require websites or apps to confirm that a user is old enough before granting access. They began with adult content in Louisiana in 2022. Over 25 U.S. states now require digital identity checks for adult material and social media, and some lawmakers have proposed extending the idea to everyday products. The details differ by state, so what you are asked for can vary a lot from site to site.
Is my face scan stored after an online age check?
It depends on the company running the check, and that is the problem. Some providers may keep documents or biometric data, and others may delete it quickly. Providers have been breached before, such as Discord losing 70,000 ID photos in October 2025. Before you upload, look for a clear statement about storage and deletion, and choose the least revealing option offered.
Why do people use VPNs to get around age checks?
Many adults do not want to hand ID documents to a third party just to browse. After Florida's law took effect, VPN demand rose 1,150%, according to the Electronic Frontier Foundation. A VPN hides your location, which can make a site treat you as if you were elsewhere. That shows how uncomfortable people are with the trade, and it also shows the checks are easy to dodge.
Can attribute-based checks protect privacy?
In theory, yes. An attribute-based check proves a single fact, such as being over 18, without revealing your full identity. That would limit how much personal data a site ever sees. The research says industry adoption is still sparse, and voluntary standards struggle when financial incentives point the other way. Legal rules may be needed to make privacy-friendly checks the default.
Ready for forensic-grade facial comparison?
Full forensic reports with detailed similarity scoring. Results in seconds.
Run My First SearchMore News
Atlantic City Hotels: Own Face Costs Star Hotel Guest $1,250
Police say a man was robbed in an Atlantic City casino hotel room and his own face was used to open his phone. Here is the warning sign that matters before any meet-up.
ai-regulationDeepfake: Brother-in-Law's Fake Photos Spark New UK Crime
The scariest number in deepfake abuse isn't 17,000. It's 1: one person close enough to already have your photos. Sophie Parrish's case shows why, and what changed.
ai-regulationKorean Deepfake: 17,378 Sexual Violence Cases in 8 Months
South Korea's regulator logged 17,378 sexual deepfake reports in eight months. This is not a celebrity problem, and one ordinary photo is all it takes.
