Age verification: Ofcom's £18M pornography crackdown

A British regulator just told Pornhub that hiring Apple wasn't enough. The company said it would use Apple's system to check that users are over eighteen. And the regulator's response was, that's fine, but did you actually test it before you turned it on?

If you've ever been asked to prove your age online,

If you've ever been asked to prove your age online, with a photo, a face scan, or a swipe of your I.D., this story is about you. Because the rules around that little pop-up just changed. Britain's media regulator, Ofcom, has opened an investigation into the company behind Pornhub. The question isn't whether age checks exist anymore. It's whether they actually work. So what does a regulator expect a platform to do before it starts scanning your face?

Let's start with the law. Under Britain's Online Safety Act, adult sites have to stop under-eighteens from getting in. Enforcement kicked in during 7/25/2025, just over a year ago. And Ofcom hasn't been shy about it. The regulator has already handed down Britain's first fine over one million pounds under this law. That went to a company called A.V.S. Group, for not having strong enough age checks. One million pounds. For a broken gate at the front door.

Now to Pornhub. Aylo, the company that runs it, said back in May that it would lean on Apple's age-verification system. Sounds solid, right? A partnership with one of the biggest tech firms on Earth. But according to Ofcom, that's not the point. The regulator's worry is that Aylo may not have done enough testing before switching the system on. In plain terms, you can't just bolt on someone else's tool and walk away. You have to prove it works. For any business handling your data, that shifts the whole game. Hiring a third party is no longer a shield.

Here's the harder truth underneath all of it

And here's the harder truth underneath all of it. According to experts in this field, no age-check method is clean. Every single one has a serious flaw. Some are easy to fool. Some don't cover everyone. And many ask you to hand over your face or your I.D., which raises its own questions about your privacy. No system does all three things well at once. Reliable, universal, and private, pick two, at best.

That's why this matters far beyond adult content. The fine ceiling here is steep. Ofcom can charge a platform up to eighteen million pounds, or a tenth of its worldwide revenue. It can also block a site entirely. Whatever verification method wins here becomes the template. The next time a website asks you to scan your face, that request traces back to a fight happening right now.

Privacy advocates aren't cheering, though. They warn this could make it much harder for ordinary adults to browse the internet privately. And some argue aggressive enforcement just pushes people toward sketchier, unregulated sites, or a V.P.N. workaround, instead of actually protecting kids.