Proving your age now means handing over more of you.
A mom in Kuala Lumpur opens her teenager's phone tonight. A new screen wants a government I.D. before the app will even load.
As of today, new social media age verification laws are live in Malaysia. Platforms must check your age with a real document before you get in. The goal is keeping kids under sixteen off apps built for adults. But here's the catch for every family. The government didn't say how to check that I.D. So each company decides how much of your identity to grab, and how long to keep it.
Proving your age now means handing over more of you.
And the country has reason to worry. According to the New Straits Times, Malaysia lost about six hundred eighty million ringgit to online scams in just four months. That's over twenty-three thousand cases.
A dozen more countries are copying this plan right now. So ask what an app keeps before you hand anything over. A login screen shouldn't quietly become a surveillance checkpoint.
Malaysia is forcing the check. But what happens when the check itself is broken?
A parent lets their kid tap through a birthday screen on Roblox. Four seconds later, they're playing next to strangers of every age.
Los Angeles County sued Roblox over this exact gap. They say the age verification let adults pose as kids with almost no friction. Here's why it matters to you. When a safety check fails, who pays? A judge is deciding if a weak check is a broken product, like a car with faulty brakes. For lawyers, the fight is whether an old internet shield law still protects the company.
A broken age check is a broken product.
According to MDL Update, this isn't one angry parent. Thirty-one lawsuits are now bundled together across twelve federal courts. Dozens more are waiting.
That's not a fluke. That's a pattern. And if this judge agrees, every app your kid touches may rewrite its age check within a year.
So how do you actually prove a person is really who they say? That takes more than a selfie.
You scan your license, then snap a selfie. It feels like the app just wants a second look at your face.
It doesn't. Remote identity proofing asks three different questions, not one. First, is the document real? Second, does your live face match the photo? Third, are you actually there right now? That last one is called a liveness check. It's why apps ask you to blink or turn your head. Each question blocks a different kind of cheating. Skip one, and you leave a door unlocked.
Three separate locks on the same door.
And this now matters more than ever. According to Biometric Update, deepfakes can now fool a liveness check alone. A fake video can copy the tiny movements the camera trusts.
So Europe made layered checks the law this year. A deepfake might beat one gate. Beating all three at once? That's a much harder trick.
Look at all three together. One country demands your I.D. One company got sued for a check that did nothing. And the real math shows why a single face scan was never enough. We're all beta testing this system with our own identities.
Links to every story and today's CaraComp podcast deep-dives are in the description. See you next time.
