Age verification for adult websites now means a real check, not a tick box. In the UK, every site with UK links that allows pornography has needed “highly effective” age checks since 25 July 2025. France, Italy and Germany enforce their own standards, the European Commission expects porn platforms to verify age under the Digital Services Act, Australia’s codes have covered porn sites since 9 March 2026, and the Free Speech Coalition counts 27 US states with age-verification laws for adult websites. The checks themselves are cheap: Ofcom’s analysis of UK services put the median cost at around £0.06 a check. The harder choices are which methods to offer, which provider to use, and how to keep the traffic a clumsy check loses.
This guide compares the methods regulators accept, the providers that sell them and what they publish about price, the privacy rules in France and Italy that narrow your choice, and what Ofcom’s data shows age checks do to traffic. Every figure comes from regulators’, courts’ and providers’ own pages, or from the Free Speech Coalition where stated, checked between 16 and 23 October 2026. It isn’t legal advice: the rules differ by country and change often, so confirm your obligations with a lawyer in each market you serve.
Key Takeaways
- A tick box no longer counts. The UK, the EU, France, Italy and Australia all reject self-declaration, and Germany requires a personal identification check.
- The UK lists seven methods it considers capable of being highly effective: credit card checks, digital identity services, email-based age estimation, facial age estimation, mobile network operator checks, open banking and photo-ID matching.
- Facial age estimation dominates. It made up 68% of completed age checks on the porn services Ofcom analysed between July and November 2025, against 12% each for email-based estimation and mobile network checks and 2% for digital ID.
- France and Italy require double anonymity. France requires at least one double-anonymity option and Italy requires it for every check: the site receives only a proof of age, and the provider that issues it can’t tell which site it’s for. Italy also rejects matching an ID photo to a selfie.
- Checks are cheap at scale. Ofcom put the median at around £0.06 a check. Published age-check prices run from nothing at Go.cam, whose FAQ also mentions pay-per-verification, and as little as €0.01 at Ondato, up to £1.00 per check at VerifyMy’s lowest volumes on terms written for online sellers. Many providers only quote on request.
- The real cost is traffic. Ofcom estimates that daily visitors to about 21,000 adult services fell by roughly a third after UK age checks began, while daily UK users of mobile VPN apps rose to 2.2 million from 1.2 million.
- The fines are large. Up to £18 million or 10% of qualifying worldwide revenue in the UK, up to 6% of worldwide turnover under the EU’s Digital Services Act, and up to $10,000 a day in Texas, plus up to $250,000 if minors got in.
Which Laws Require Age Verification on Adult Websites?
Where your visitors are matters, and in France and Italy so does where your company is based. Most of these regimes also reach foreign sites that serve their users, but France and Italy treat sites based in other EU countries differently: France covers them only once a ministerial order names them, and Italy only once AGCOM lists them. A site based outside the EU with UK, French and Texan visitors has three sets of rules to meet.
| Market | Who it covers | In force | What the check must do | Maximum penalty |
|---|---|---|---|---|
| UK (Online Safety Act) | Sites that publish porn, and services where users share it, “such as cam, fan and tube sites”, if they have UK links | 17 January 2025 for publishers; 25 July 2025 for all | Be “highly effective”; seven methods listed; self-declaration and debit cards excluded | £18 million or 10% of qualifying worldwide revenue, whichever is greater; court-ordered blocking |
| France (SREN law, Arcom) | Porn sites and video-sharing platforms based in France or outside the EU, and EU sites named by ministerial order (17 in the first order) | January 2025 for sites based in France or outside the EU; three months after a ministerial order names an EU-based site | Meet Arcom’s technical standard, including at least one double-anonymity option | €250,000 or 4% of worldwide turnover, whichever is greater, for letting minors in (€500,000 or 6% for a repeat breach); after an ignored formal notice, blocking and delisting, with ISPs and search engines given 48 hours to act |
| EU (Digital Services Act) | Online platforms with porn; micro and small enterprises are exempt from this DSA duty unless designated very large, but the Audiovisual Media Services Directive still requires every video-sharing platform, whatever its size, to verify age | DSA Article 28 already applies; Commission guidelines of 14 July 2025, voluntary but used to assess compliance | Verify age, not just estimate it, for porn; double-blind methods encouraged | 6% of worldwide annual turnover |
| Germany (JMStV) | Anyone offering porn online | Long-standing | A closed user group: one-time personal identification, then authentication each session | €500,000 |
| Italy (AGCOM) | Porn sites and video platforms on AGCOM’s list (79 services as of 29 September 2026), including sites based outside Italy | 12 November 2025; 1 February 2026 for sites in other EU countries | Double anonymity through an independent certifier; ID-to-selfie matching rejected | €250,000; blocking |
| Australia (eSafety codes) | Porn sites and other high-risk services | 9 March 2026 | Technically accurate, robust, reliable and fair; eSafety’s guidance adds more than one method, not government ID alone | A$54.6 million per breach |
| US (27 states, including Texas) | In Texas, commercial sites where more than one-third of the material is sexual material harmful to minors, and sites with public tools for creating it | Texas: 1 September 2023 (enforceable from 19 September 2023 after a court ruling, per the Free Speech Coalition) | Texas: digital ID, government ID or transactional data, with no retention of identifying information | Texas: $10,000 a day, $10,000 for each instance of retained identifying information, and up to $250,000 more if minors got in |
Penalties are the maximums for a first breach; France’s rise to €500,000 or 6% for a repeat breach, and Texas can add $10,000 for each instance of retained identifying information. The US figure is the Free Speech Coalition’s count, from its FAQ last updated on 8 July 2026 (an older FSC page still says 25); we found no official national tally. The US Supreme Court upheld Texas’s law on 27 June 2025, finding it “subject only to intermediate scrutiny, which it readily survives.” For the launch checklist that goes with these rules, see our guide on how to start a porn site, and for the company side, our guide on how to set up a legal porn company.
Age Verification Methods Compared
Ofcom’s guidance describes how each accepted method works, and its data shows which ones UK users actually choose. Here they are side by side.
| Method | How it works | What the user shares | What to know |
|---|---|---|---|
| Facial age estimation | Software analyses a selfie to estimate age | A face image | 68% of completed checks on the UK porn services Ofcom analysed. Ofcom expects a challenge age approach, and France requires a liveness check. |
| Photo-ID matching | An uploaded ID document is compared with a live image of the user | An ID document and a face image | Accepted in the UK and, as automated ID and selfie matching, in Germany. Italy rejects it on privacy grounds. |
| Email-based age estimation | Estimates age from the other services where the email address has been used, such as mortgage lenders | An email address | 12% of completed checks in Ofcom’s porn sample, although only five of the services offered it. |
| Mobile network operator check | Checks whether the adult content filter on the user’s mobile account has been removed | A mobile number | 12% of completed checks, from only two services offering it. |
| Credit card check | The issuing bank confirms a valid credit card; UK credit cards require the holder to be 18 | Card details | Credit only: Ofcom excludes debit cards. Eight in ten porn users surveyed by Ofcom were uncomfortable using it. France allowed bank cards only for a transition period, with two-factor authentication. |
| Open banking | The user’s bank confirms whether they are over 18, with their consent | A bank login, through the provider | The site receives only a yes or no, not the date of birth. |
| Digital ID or reusable age token | A verified digital ID or wallet shares an over-18 attribute | An age attribute | Only 2% of completed checks; one porn site dropped it after a week because users abandoned the “long” flow. Texas accepts digital identification, and Louisiana and Utah accept a digitized ID card. |
| Self-declaration | The user ticks a box or clicks “I’m 18” | Nothing | Not accepted in the UK, the EU, France, Italy or Australia. |
Two rules shape every method. Ofcom says the safest approach for a porn service is a front gate, where users see only a blank landing page until they pass the check, and a publisher that uses any other placement must ensure that “no regulated provider pornographic content is visible to users on entering the site”. And checks expire: Arcom’s standard ends a check when the user leaves the service or after an hour of inactivity, Italy’s after “45 minutes of actual inactivity”, and the EU’s guidelines expect adult platforms to check age “at each instance” the service is accessed. Re-checks mean more checks per visitor, which matters when you price a provider.
Age Verification Providers Compared
Dozens of companies sell age checks; the Age Verification Providers Association alone lists 36 members, most of them age-check providers. Here are 12 providers whose age checks can be used on adult sites, with what each one publishes about its methods and prices. The certification column shows what each holds in the public register of the Age Check Certification Scheme (ACCS), where certificates are issued against standards such as ISO/IEC 27566-1 and IEEE 2089.1.
| Provider | Methods it offers | Published price | ACCS register | Adult-site evidence |
|---|---|---|---|---|
| Yoti | Facial age estimation, Digital ID app, ID and selfie, credit card, mobile, email and more | Not published; its standard terms set a £250 set-up fee | ISO/IEC 27566-1, valid to September 2029 | Yoti says OnlyFans uses its facial age estimation for new fan accounts in some places, including the UK |
| VerifyMy | Email-based estimation, mobile (UK), credit card, facial estimation, ID and face match, credit bureau | £1.00 down to £0.80 per successful check plus VAT, by monthly volume, in terms of sale written for online sellers (12-month exclusive contract); adult-site rates not published | IEEE 2089.1 for face estimation, and ISO/IEC 27566-1 | Recommends email estimation for adult platforms; Aylo’s Allpasstrust named it as its UK email-check provider in August 2025 |
| Ondato | Facial estimation with an ID fallback, ID documents, a reusable OnAge token | €0.30 to €0.01 per completed verification | IEEE 2089.1 and ISO/IEC 27566-1 | Case studies with OnlyFans and Fansly |
| Didit | Selfie age estimation with an ID fallback, eID wallets, database checks | $0.10 per age estimate, plus $0.15 when the ID fallback runs; new plans from 1 November 2026 | None | Says it suits adult content; no named adult clients |
| Go.cam | On-device webcam estimation with an ID fallback, email, card validity, double anonymity | €0 per verification, though its FAQ also describes pay-per-verification | IEEE 2089.1 at the Basic level, held by its operator, GSI Développement | Lists Xlovecam, Sunporno and Realitylovers |
| AgeGO | Selfie with an ID fallback, selfie and ID, card, Yoti Digital ID; double anonymity for Arcom | Not published; billed in euros for each check started | ISO/IEC 27566-1 | Part of EXOGROUP; integrates with the ExoClick ad network; no named adult clients |
| Incode | On-device and server facial estimation, ID, digital ID, email, phone and data checks | Not published | Listed, but no certificate shown | Chaturbate uses it to check streamers and viewers |
| Persona | Selfie estimation, ID and selfie, database, credit card, email, phone, digital IDs; a double-blind option | Platform from $250 a month on a 12-month contract, plus per-verification fees it doesn’t publish | ACCS 1:2020 Level 2, expiring November 2026 | One unnamed adult brand, for creator onboarding |
| Veriff | Facial age estimation, ID age validation, database and phone checks | Identity plans at $0.80 to $1.89 per check, with $49 to $209 monthly minimums; age products on enterprise terms | None | None named |
| AgeChecked | Mobile, credit card, electoral roll, driving licence, facial analysis with an ID fallback | On request; its e-commerce plugin starts at £40 a month for 100 checks | Listed, but no certificate shown | A page for adult sites; no named clients |
| Luciditi | AI estimation, digital ID, open banking, mobile, credit card, document scan, data checks | Annual subscription; prices not published | None | No named adult clients; WordPress plugin |
| Privately | On-device facial and voice estimation, and NFC ID document checks | Not seen (its plans page needs JavaScript); free trial | ISO/IEC 27566-1, plus a UK GDPR certificate | No named adult clients |
Treat the table as a shortlist, not a recommendation. Logos and case studies don’t prove a current contract, and several providers contradict themselves on their own pages: VerifyMy says ID and selfie images are deleted once a check is done, while its retention table keeps ID images for 28 days, and Go.cam is both free and pay-per-verification depending on the page. Get terms in writing. Allpasstrust, which Aylo uses on its own sites, has no offer for other site owners; its login works only on Aylo’s sites.
Accuracy figures for facial estimation are usually given as mean absolute error (MAE), the average gap between estimated and real age. Most come from the providers, on different age bands and test photos, so they can’t be compared directly. Yoti says ACCS testing put its MAE for 18-year-olds at 1.05 years, although NIST measured 2.63 to 2.90 years for its September 2024 model on visa and immigration photos, Privately reports 1.29 years for 18 to 20-year-olds, and Didit’s documentation gives 1.81 years for 18 to 20. Errors of a year or two either side of 18 are why regulators expect a buffer, such as Ofcom’s challenge age, and why several providers fall back to an ID check for borderline faces: Go.cam proposes a document check “If the user appears younger than 25”.
Reusable checks cut repeat friction. Yoti Keys, Ondato’s OnAge (its pages differ on whether it works across sites), Go.cam’s reusable status, AgeGO’s cross-site verification, which is on by default, and Didit’s reusable KYC all let a verified user skip a new check on other sites that use the same provider. Ofcom’s data is a caution, though: digital ID, the most reusable method, made up only 2% of completed checks on the porn services it analysed.
How Much Does Age Verification Cost?
The best independent figures come from Ofcom, which collected costs from the UK services it analysed. Its estimates of the average cost per check “had a median of around £0.06, with most estimates falling at or below £0.10”, and all were below £0.30, the top of the range it had forecast in April 2025. Ofcom also found that providers sell on “fixed fees, subscriptions, and volume-tiered pricing”, so the cost per check can fall as volume rises.
Published list prices are a ceiling, not what large sites pay. Didit lists age estimation at $0.10 a check (unchanged in the plans it introduces on 1 November 2026), Ondato €0.30 to €0.01 per verification, and VerifyMy’s terms of sale for online sellers £1.00 down to £0.80 per successful check plus VAT, depending on monthly volume, on a 12-month exclusive contract. Go.cam’s pricing page says it charges nothing per verification, though its FAQ describes a pay-per-verification model. Veriff’s published plans, $0.80 to $1.89 per verification, cover identity verification, and Persona’s platform starts at $250 a month. Yoti, AgeGO, Incode and Luciditi don’t publish prices, we couldn’t read Privately’s plans page, and Yoti’s standard terms add a £250 set-up fee.
Check what counts as a billable check, too. VerifyMy’s terms bill each successful check, Ondato charges only for completed verifications, Luciditi charges “when a user clicks start”, and AgeGO counts a check “each time a verification method is started, including failed or abandoned attempts”, and also when a returning user logs in or is recognised from another AgeGO site. With the same traffic, those rules can produce very different bills.
At Ofcom’s median, 100,000 checks a month cost about £6,000; at £0.10 they cost £10,000. Three things push the bill up:
- Re-checks. Session and inactivity limits in France and Italy, and the EU’s check at each access, can mean several checks per regular visitor.
- Set-up. Services that reported UK set-up costs to Ofcom mostly put them in the tens of thousands of pounds, whether they bought checks from a provider or built their own, and Ofcom calls that relatively low.
- Lost traffic. Ofcom says that “for many pornography services that have experienced a significant reduction in user traffic this has impacted revenue”, and it expects free-to-access sites to be hit harder than subscription sites.
Privacy Rules: Double Anonymity and Data Minimisation
Privacy rules decide which providers you can use in some markets, so check them before you sign.
- France requires porn sites to offer at least one “double anonymat” option, available to at least 80% of French adults. Under it, the site must not be able to recognise that two proofs of age came from the same person, and the provider must not be able to tell which site the check is for. Every provider must be legally and technically independent of any porn service the standard covers.
- Italy makes double anonymity mandatory through an independent certifier, and doesn’t accept publishers collecting ID documents themselves, estimating age from browsing history, or comparing an ID photo with a selfie.
- The EU encourages double-blind methods and says proof-of-age tokens should come from an independent third party. In its own age verification app, sites “will only receive a proof that the user is over 18, without any other personal details.”
- The UK has no double-anonymity rule, but Ofcom says compliance with both online safety and data protection law “is mandatory and should not be considered a trade-off.”
- Texas bars sites, and the third parties that check age for them, from retaining any identifying information of the individual.
The safest default is a provider that tells your site only whether the user is over 18, deletes what it collects, and can offer a double-anonymity flow for France and run every Italian check that way.
What Age Checks Do to Traffic
Ofcom’s July 2026 report gives the clearest picture of what happens after age checks arrive. More than 69 million age checks were completed between July and December 2025 across the 32 services it sampled, 19 of them porn services, and estimated daily visitors to about 21,000 adult services fell by roughly a third. Ofcom’s earlier Online Nation 2025 report found that between July and August 2025 alone, Pornhub’s UK unique visitors fell 31%, xHamster’s 28% and xvideos’ 24%.
Some of that traffic went to sites that didn’t comply: 10 of the 17 services without age checks that Ofcom analysed gained traffic, and daily UK users of mobile VPN apps rose to 2.2 million, from 1.2 million before 25 July 2025, though people use VPNs for many reasons. Ofcom is enforcing against that advantage, but it says the number of top-100 porn services with age checks has been falling since January 2026 as sites without them grow more popular. By July 2026 Ofcom had opened 23 investigations into the providers of 88 adult services, 73% of which then added age checks or blocked UK users, and had fined 7 providers of 24 sites, the largest fine being £1.35 million. In September 2026 it fined the provider of Xgroovy £700,000 for breaching its age-check duty, plus £30,000 for a separate breach, and opened an investigation into Aylo over Pornhub. In March 2025 Ofcom also fined OnlyFans’ provider, Fenix International, £1.05 million for giving it inaccurate information about its age checks, as our OnlyFans statistics explain. In France, Arcom says the time minors spend on porn sites has fallen by nearly a third.
Age Verification and SEO
An age gate shouldn’t cost you rankings. Google’s guidelines for explicit content say: “If you have content behind an age gate or other access restriction, be sure to allow Googlebot to crawl your content without triggering the age gate. You can do this by verifying Googlebot requests and serving the content without age gate.” If you don’t, “it may cause your site to rank poorly on Google Search.” Our guide to adult chat site SEO covers how to let Googlebot past the gate while keeping each page on its own URL.
Search also matters more after the checks arrive. With less casual traffic reaching age-checked sites, visitors who already know your brand matter more, and our guide to how porn tube sites make money shows how much of a free site’s income depends on traffic.
How to Choose an Age Verification Provider
- Map your markets first. List where your visitors are, then the methods each market accepts and rejects: double anonymity for France and Italy, no ID-to-selfie matching in Italy, and closed user groups in Germany.
- Offer more than one method. The EU’s guidelines and Australia’s eSafety Commissioner both say platforms should, and Ofcom’s data shows users favour estimation methods over cards and digital ID.
- Ask for evidence of accuracy. Ofcom judges methods on technical accuracy, robustness, reliability and fairness, and Germany’s KJM requires facial age estimation to be at least 95% reliable for ages 13 to 18.
- Check what data you receive and what the provider keeps. A yes-or-no answer and deletion after the check are the norms the privacy rules above point to.
- Price the whole flow. Multiply the per-check price by checks per visitor, including re-checks, and ask how the price falls with volume.
- Test the user flow. A long flow loses users: the porn site that dropped digital ID after a week did so because users abandoned it.
- Keep due diligence going. Ofcom expects services to check providers “both when selecting age assurance providers and on an ongoing basis”, including tracking their accuracy over time.
How Adult SEO Minds Helps
Age verification is now part of the build and part of the SEO plan, and we work on both.
- Building it in. Our adult website development team builds age gates, ID and 2257-style record keeping, geo rules and consent flows into adult sites, and tests age, payment and compliance flows on real devices before launch.
- Keeping rankings. Our SEO for porn sites fixes crawlability and indexation so your public pages rank, and builds the brand and content that bring visitors back through search.
- UK sites. If the Online Safety Act is your main concern, our adult SEO agency UK team keeps your SEO white-hat while you meet it.
Frequently Asked Questions
Do adult websites have to verify age?
In the UK, France, Italy, Germany, Australia and 27 US states, yes, and the EU expects it of porn platforms. The UK has required highly effective age checks on every site with UK links that allows pornography since 25 July 2025, France, Italy and Germany have their own rules, the EU expects porn platforms to verify age, Australia’s codes cover porn sites from 9 March 2026, and the Free Speech Coalition counts 27 US states with age-verification laws. Most of these rules also apply to foreign sites that serve users in those markets, although France and Italy cover sites based in other EU countries only once those sites are designated or listed.
How do adult sites verify your age?
Usually with a selfie-based facial age estimate, which made up 68% of completed checks on the UK porn services Ofcom analysed. Other accepted methods include photo-ID matching, email-based age estimation, mobile network operator checks, credit card checks, open banking and digital ID. Ticking a box saying you’re 18 doesn’t count.
Is age verification on adult sites safe?
It depends on the provider and the method. The privacy-first designs give the site only a yes-or-no answer, and France requires sites to offer at least one double-anonymity option and Italy requires double anonymity for every check, so with those checks the provider doesn’t learn which site you’re visiting. UK sites must also comply with data protection law, which Ofcom says is not a trade-off.
What websites now require age verification?
In the UK, every site and app with UK links that allows pornography, including cam, fan and tube sites where users share content. In France, porn sites and video platforms based in France or outside the EU, plus EU-based sites named by ministerial order; in Italy, the porn sites and video platforms on AGCOM’s list; in Germany, anyone offering porn online; and in the US, adult sites in the 27 states the Free Speech Coalition counts, under each state’s own definition.
How much does age verification cost?
Ofcom found the median cost per check across the UK services it analysed was around £0.06, with most at or below £0.10. Published prices for age checks range from €0.30 down to €0.01 per verification at Ondato and £1.00 down to £0.80 per successful check under VerifyMy’s terms for online sellers, depending on volume, while Didit lists $0.10 per age estimate and Yoti and others quote on request. What counts as a billable check, and how often users must check again, matter as much as the headline price.
What is double-blind age verification?
It’s a check where the site learns only that the user is over 18 and the provider doesn’t learn which site the check is for. France calls it double anonymat and requires porn sites to offer at least one such option, Italy requires it, and the EU’s age verification app works this way, with single-use proofs.
Does age verification hurt SEO?
Not much, if Googlebot can get past it. Google says to verify Googlebot’s requests and serve your content without the age gate, and warns that blocking it may cause your site to rank poorly. The bigger effect is on traffic: Ofcom estimates daily visitors to adult services fell by roughly a third after UK checks began.
What happens if an adult site doesn’t verify age?
Fines and blocking. Ofcom can fine up to £18 million or 10% of qualifying worldwide revenue, whichever is greater, and had fined 7 providers of 24 sites by July 2026, before fining the provider of Xgroovy in September. France can fine up to €250,000 or 4% of worldwide turnover, whichever is greater (€500,000 or 6% for a repeat breach), and, if a site ignores a formal notice, have it blocked and delisted, with ISPs and search engines given 48 hours to act. Texas can recover up to $10,000 a day, plus up to $250,000 if minors got in.
The Short Version
If your site serves the UK, the EU, Australia or most of the US, you need a real age check. Offer more than one accepted method, with facial age estimation as the one most users choose, add a double-anonymity option for France and use only double-anonymous checks for Italy, and make sure your provider tells you only whether a user is over 18. The checks cost pennies, around £0.06 each at Ofcom’s median, but a clumsy flow costs visitors, so test it, let Googlebot past the gate and keep building the search traffic that brings in visitors who are ready to pass.
Sources, checked between 16 and 23 October 2026: Ofcom’s guidance on highly effective age assurance, its age assurance pages, its report on the use of age assurance (July 2026), its Online Nation 2025 report and its enforcement updates; Arcom’s technical standard, its press releases and its pages on the protection of minors from online pornography, and the SREN law as adopted by France’s parliament; the European Commission’s guidelines on protecting minors under the Digital Services Act and its age verification pages; Germany’s youth media protection treaty (JMStV) and the KJM’s criteria for age verification systems; AGCOM’s resolution 96/25/CONS, its age-verification page and its press releases; the eSafety Commissioner’s FAQ and the Louisiana and Utah statutes, read from archived copies because the official sites didn’t respond; the Texas statute and the Supreme Court’s opinion in Free Speech Coalition v. Paxton; the Free Speech Coalition’s age verification FAQ; Google’s guidelines for explicit content; and the providers’ own product, pricing, terms and privacy pages, the AVPA member list and the ACCS certification register. Calculations are our own.