The United Kingdom has started enforcing the Online Safety Act, a law that requires websites hosting adult material—ranging from pornography sites to certain social media platforms—to introduce mandatory age verification systems.
Simple pop-ups asking if a visitor is over 18 are no longer acceptable. Instead, users must provide official proof of age, such as government-issued identification or even a facial scan, to gain access to explicit material.
Who’s Complying, Who’s Not
Some of the biggest adult platforms, including Pornhub and XHamster, have already rolled out verification systems to meet the new standards. But compliance has not been universal. Smaller operators say the systems are costly to implement, while others fear a sharp decline in visitors. A handful have chosen to ignore the mandate altogether, continuing to operate without checks.
For those who fail to comply, the risks are steep. Ofcom, the regulator in charge, can impose penalties of up to £18 million ($24.1 million) or 10% of a company’s global turnover. Executives who repeatedly flout the rules could face criminal charges and up to two years in prison. Faced with these consequences, some platforms have simply stopped offering their services in the UK.
Privacy Concerns Drive Users Away
While the law’s stated goal is protecting minors, many adult internet users are alarmed by the requirement to hand over sensitive information. Third-party verification firms insist that they neither store personal data nor track browsing behavior, but skepticism remains high.
The thought of submitting an ID or selfie before visiting a porn site raises fears of hacking, leaks, and surveillance. Many users are choosing to avoid regulated sites entirely, either turning to Virtual Private Networks (VPNs) to mask their location or seeking out sites that have not adopted verification systems.
Traffic Booms for Rule-Breaking Sites
This shift in user behavior is evident in web traffic data. According to an analysis by The Washington Post using Similarweb rankings, 14 of the UK’s top 90 porn sites are still operating without full age checks. Over the last two months, those sites have seen significant surges in visits from UK users. In some cases, traffic has nearly doubled.
The unintended outcome: compliant sites are losing users and ad revenue, while also bearing the cost of maintaining verification systems. Meanwhile, the rule-breakers are benefiting from the new restrictions.
Ofcom Cracks Down
To address this imbalance, Ofcom has opened investigations into four companies that collectively run 34 adult sites, to determine if their verification methods meet legal requirements. If found lacking, these operators could face hefty fines and other sanctions.
Despite growing public criticism, the law is unlikely to be repealed. A petition calling for its reversal has attracted over 533,000 signatures, but the UK government continues to defend the measures as necessary for child safety.
A Global Debate
The UK is not alone in testing such policies. Across the United States, several states have passed similar age-verification requirements for adult websites. In response, some major platforms have blocked access altogether in states where compliance is required, preferring to avoid the legal and financial risks.
Digital rights groups argue that these measures erode online privacy and risk creating a precedent where identity checks could extend to other types of online content. Critics warn that this could fundamentally change the way people interact with the internet, shifting it away from an open space toward a heavily monitored environment.
Balancing Safety and Freedom
At the heart of the debate lies a difficult balance. Supporters say that without strict checks, children will continue to encounter harmful content online. Opponents counter that the cost to privacy and freedom is too high, and that the law only drives users toward less secure, unregulated corners of the internet.
The long-term concern is about precedent. If ID verification becomes the norm for accessing adult content, it may not be long before similar requirements spread to other services. That could mean the gradual erosion of anonymity and accessibility—two principles that have long defined the internet.
