Age Verification: Ofcom's 4 Checks Will Test Adults Too

Starting in March of twenty twenty-seven, a seventeen-year-old in the U.K. who wants a new Instagram account may have to show a bank-verified identity, a government I.D., or a scan of their own face. And so will their parents. The reason is simple. The only way to prove a teenager is underage is to check everyone.

If you've ever signed up for an app, or helped a

If you've ever signed up for an app, or helped a kid do it, this one's about your household. It also touches something that feels a little uncomfortable. Your face and your documents are becoming the price of a login.

Here's the story. Britain's communications regulator, Ofcom, has published four methods it calls "highly effective" for checking age online. They are facial age estimation, document checks, digital I.D., and banking checks. They'll enforce the U.K.'s ban on social media for under-sixteens. The ban covers ten major platforms, including Instagram, Snapchat, TikTok, Facebook, and X. The old system was typing in a birthdate. That's ending. So the question threading through all of this is, what do we hand over, and to whom, to keep kids safe?

Start with the face scan, since it's the one most people haven't seen before. Facial age estimation doesn't identify you. A program looks at your selfie and guesses how old you seem. Ofcom recommends a approach borrowed from the corner shop. It's called Challenge 25. If a clerk thinks you look under twenty-five, they ask for I.D. Online, it works the same way. If the system's guess isn't confident enough, you get pushed to a stronger check. Think about what that means for a twenty-year-old, or a forty-year-old who looks young. They'll get questioned too.

The gap that worries regulators

Now the gap that worries regulators. Ofcom estimates ninety-four percent of sixteen and seventeen-year-olds have photo I.D. That sounds high, until you do the math the other way. About a hundred and fifty thousand of those teenagers have neither a driving licence nor a passport. That's a hundred and fifty thousand kids who'd need another route in, or get shut out. For a family, that could mean a teenager locked out of the place where their friends are, simply because nobody ever got them a passport.

Then there's the data. Privacy advocates warn that people over sixteen will have to give I.D. or biometric data to private age-checking companies, and that those companies aren't tightly regulated. They point to Discord. That platform had a data breach involving exactly this kind of information. One expert in the article makes a sharp point. Ofcom's approach accepts face estimation and document matching because they're simple to roll out. But simple shifts the burden onto platforms and outside vendors. That's precisely where breaches happen. There is a better tool, called a zero-knowledge proof. It lets you prove you're old enough without revealing who you are or your birthdate. But it's still rarely used at scale. So the safer option exists on paper. The riskier ones are what's arriving.

And do the methods even work? Critics say no, not reliably. Age checks can often be dodged with a V.P.N., which hides where you're connecting from, or with a fake I.D. Facial technology also has known accuracy gaps for women and people of color. Australia's ban took effect in December of twenty twenty-five, and the Molly Rose Foundation noted that many Australian under-sixteens could still get onto platforms. Ofcom itself admits these methods "may not be foolproof."