Ethical Hacking News
The UK government has released a shortlist of four methods for checking the age of users on social media platforms, as part of its efforts to implement a ban on minors accessing online content. The regulator, Ofcom, has confirmed that some adults may not need to undergo age verification, but many will be required to do so. The shortlist of methods includes photo-ID matching, banking checks, digital ID services, and facial age estimation, with two additional methods being reserved for those aged 18 and above. The UK government is expected to outline the first set of regulations related to the under-16 social media ban by the end of the year, and Ofcom is in the process of developing draft guidance for platforms.
Four age verification methods remain from the initial list, including photo-ID matching, banking checks, digital ID services, and facial age estimation. Facial age estimation is considered unreliable and may be used in conjunction with other methods. Three additional methods are reserved for those aged 18 and above, including credit card checks, mobile network checks, and email checks. The regulator estimates that around 94% of 16-17-year-olds in the UK have a form of photo ID, while 150,000 do not. Big Brother Watch's Director expressed concerns about the plan being a national ID system by the back door and threatening online anonymity and free speech. Ofcom acknowledged that the risk of circumvention cannot be entirely eliminated and plans to adopt and learn lessons from Australia's under-16 social media ban. Existing age checks have proven largely ineffective at keeping under-18s away from adult content online, with some finding ways to bypass checks. The UK government is expected to outline regulations related to the under-16 social media ban by the end of the year and Ofcom will develop draft guidance for platforms.
The UK government has recently released a shortlist of four methods for checking the age of users on social media platforms, as part of its efforts to implement a ban on minors accessing online content. The regulator, Ofcom, has confirmed that some adults may not need to undergo age verification, but many will be required to do so. The seven methods initially outlined by Ofcom have been narrowed down to four, with two additional methods being reserved for those aged 18 and above.
The four methods that remain from the initial list include photo-ID matching, banking checks, digital ID services, and facial age estimation. Photo-ID matching involves comparing the information displayed on identity documents with a live image of the subject taken during the verification process. Banking checks involve analyzing the information processed by banks, which are estimated to have around 90% of 16-17-year-olds in the UK. Digital ID services involve third-party analysis of a person's photo once, and if it matches the age they claim to be, allows them to verify their age across other services.
Facial age estimation is a method that even Ofcom admitted isn't quite reliable enough to be used on its own. The regulator stated that online services can use technologies to analyze a subject's facial features to determine their age, but acknowledged that the same technologies also have a margin of error of a few years. As a result, online services may wish to use a second method of HEAA (Highly Effective Age Assurance) to verify the results of this check.
The three methods reserved for those aged 18 and above include credit card checks, mobile network checks, and email checks. Credit card checks involve verifying the age of adults who have a credit card, while mobile network checks involve verifying the age of adults who have a mobile phone contract. Email checks involve analyzing the email address to make educated guesses about the age of the user based on the other types of services with which it is registered.
Ofcom acknowledged that not every 16-year-old will have a form of photo ID, which is required for all four of its HEAA methods, so they will need to acquire one in order to access online services. The regulator estimated that around 94% of 16-17-year-olds in the UK have a form of photo ID, such as a passport, driving licence, or an ID card certified by the Proof of Age Standards Scheme, and that around 150,000 have neither.
Big Brother Watch's Director, Silkie Carlo, expressed concerns that the plan for a government "social media ban" is a national ID system by the back door. Carlo stated that the government and Ofcom have admitted that children will get around the ban, which means that the real effect will be normalizing adults and children alike to handing over their passports just to get online. Carlo also noted that the plan will kill anonymity online and that the policy is an Orwellian assault on free speech and privacy.
Ofcom admitted that "the risk of circumvention cannot be entirely eliminated," as some children will find ways to bypass these age checks, no matter how fully they are implemented. The regulator cited Australia as a country that introduced an under-16 social media ban in December 2025, but has struggled with a large proportion of children devising ways to circumvent these checks. Ofcom said that the UK government intends to adopt, but learn lessons from, Australia's rollout, committing to implementing more robust measures that promote the ban's aims.
In May, nearly a year after the OSA's age verification requirements kicked in, researchers found that the existing age checks proved largely ineffective at keeping under-18s away from adult content online. Some reported beating age checks with just a drawn-on moustache. England's Children's Commissioner, Dame Rachel de Souza, stated that the OSA "has made absolutely no difference" to children's ability to access potentially harmful online content.
The UK government is expected to outline the first set of regulations related to the under-16 social media ban by the end of the year, and Ofcom is in the process of developing draft guidance for platforms. Ofcom chief executive Dame Melanie Dawes stated that when the social media ban takes effect, it will take a whole-of-society approach to ensure the ban is upheld. Dawes said that when it comes into force next year, Ofcom will be ready to take swift and firm action against any company that fails to comply.
Related Information:
https://www.ethicalhackingnews.com/articles/The-UKs-Under-16-Social-Media-Ban-A-Complex-Web-of-Age-Checks-and-Regulatory-Challenges-ehn.shtml
https://www.theregister.com/security/2026/10/29/shortlist-of-age-checks-for-the-uks-under-16-social-media-ban-is-out-some-adults-will-need-verifying/5306282
Published: Thu Oct 29 11:04:14 2026 by llama3.2 3B Q4_K_M
