Topics

More from TechCrunch

The growing debate over age verification laws

What exactly is age verification?

What is the point of age verification?

Tech and VC heavyweights join the Disrupt 2025 agenda

Netflix, ElevenLabs, Wayve, Sequoia Capital, Elad Gil — just a few of the heavy hitters joining the Disrupt 2025 agenda. They’re here to deliver the insights that fuel startup growth and sharpen your edge. Don’t miss the 20th anniversary of TechCrunch Disrupt, and a chance to learn from the top voices in tech — grab your ticket now and save up to $600+ before prices rise.

Tech and VC heavyweights join the Disrupt 2025 agenda

Netflix, ElevenLabs, Wayve, Sequoia Capital — just a few of the heavy hitters joining the Disrupt 2025 agenda. They’re here to deliver the insights that fuel startup growth and sharpen your edge. Don’t miss the 20th anniversary of TechCrunch Disrupt, and a chance to learn from the top voices in tech — grab your ticket now and save up to $675 before prices rise.

Is it safe to verify your identity

Does it really matter if I lose my anonymity on the internet? I’m not doing anything shady.

What age verification laws have gone into effect in the U.S.?

What counts as “sexual material harmful to minors”?

What’s going on with age verification in the U.K.?

Does the U.K. age verification law affect me if I live elsewhere?

Can’t you just use a VPN to get around these barriers?

Most Popular

OpenAI announces AI-powered hiring platform to take on LinkedIn

Tesla’s 4th ‘Master Plan’ reads like LLM-generated nonsense

BMW, I am so breaking up with you

Homicide at Burning Man turns Silicon Valley’s desert playground into a crime scene

Nvidia says two mystery customers accounted for 39% of Q2 revenue

Cracks are forming in Meta’s partnership with Scale AI

Mastodon says it doesn’t ‘have the means’ to comply with age verification laws

Latest

AI

Amazon

Apps

Biotech & Health

Climate

Cloud Computing

Commerce

Crypto

Enterprise

EVs

Fintech

Fundraising

Gadgets

Gaming

Google

Government & Policy

Hardware

Instagram

Layoffs

Media & Entertainment

Meta

Microsoft

Privacy

Robotics

Security

Social

Space

Startups

TikTok

Transportation

Venture

Events

Startup Battlefield

StrictlyVC

Newsletters

Podcasts

Videos

Partner Content

TechCrunch Brand Studio

Crunchboard

Contact Us

The growing debate over age verification laws Amanda Silberling AM PDT · September 6, 2025 Technologists and policymakers are reckoning with a generation-defining problem on the internet: while it can be a revolutionary force for unprecedented education and connection across the globe, it can also pose dangers to children when they have completely unfettered access.

There is no simple way, however, to monitor children’s internet access without surveilling adults, paving the way for disastrous online privacy violations.

While some advocates praise these laws as victories for children’s safety, many security experts warn that these laws are being proposed and passed with flawed implementation plans, which pose dangerous security risks for adult users as well.

Here’s a primer on where the debate over age and identity verification stands, and where these laws are being enacted.

When we talk about age verification laws, we aren’t talking about when you made a Neopets account as a kid and checked a box to affirm that you were at least 13 years old. In the United States, those types of age checks are a result of the Children’s Online Privacy Protection Act (COPPA), an internet safety law passed in 1998. But, as you already know, if you had a Neopets account when you were 10, COPPA-era age checks are very easy to navigate around. You simply click a box that says you’re 13.

In the context of the laws that have cropped up during the 2020s, age verification usually refers to a user uploading an official ID to a third-party verification system to prove who they are. Users might also upload biometric facial scans, like the ones that power Face ID on iPhones.

Of course, internet safety is not really about preventing children from playing games like Neopets. Parents and lawmakers are concerned about children accessing content that’s potentially dangerous for minors, like online pornography, information about illicit drug use, and social media sites where they may encounter strangers with bad intentions.

Techcrunch event Tech and VC heavyweights join the Disrupt 2025 agenda Netflix, ElevenLabs, Wayve, Sequoia Capital, Elad Gil — just a few of the heavy hitters joining the Disrupt 2025 agenda. They’re here to deliver the insights that fuel startup growth and sharpen your edge. Don’t miss the 20th anniversary of TechCrunch Disrupt, and a chance to learn from the top voices in tech — grab your ticket now and save up to $600+ before prices rise. Tech and VC heavyweights join the Disrupt 2025 agenda Netflix, ElevenLabs, Wayve, Sequoia Capital — just a few of the heavy hitters joining the Disrupt 2025 agenda. They’re here to deliver the insights that fuel startup growth and sharpen your edge. Don’t miss the 20th anniversary of TechCrunch Disrupt, and a chance to learn from the top voices in tech — grab your ticket now and save up to $675 before prices rise. San Francisco | October 27-29, 2025 REGISTER NOW These concerns are not unfounded. Parents have turned to lawmakers to share horrific stories of how their children died after purchasing fentanyl-laced drugs on Facebook, or how they took their own lives after facing incessant bullying on Snapchat.

As technology becomes more sophisticated, the problem is getting worse: Meta’s AI chatbots have reportedly flirted with children, while Character.AI and OpenAI are facing lawsuits over the suicides of children that were allegedly encouraged

We know the internet isn’t all bad, though. Without leaving your home or spending any money, you can learn to play guitar or write code. You can forge meaningful friendships with people from the other side of the world. You can access specialized telehealth care, even if you live somewhere where no doctor is trained in your diagnosis. You can find the answer to just about any question you want at any given moment (the capital of Madagascar is Antananarivo,

This is how global lawmakers have arrived at what they believe to be a sound compromise: they won’t nuke the whole internet, but they’ll just put certain content behind a gate that you can only unlock if you can prove you’re an adult. But in this case, you’re not just clicking a box to confirm your age – you’re uploading your government ID or scanning your biometric data to prove you can access certain content.

The safety of any digital security measure depends on its implementation.

Apple builds out products like Face ID so that these biometric scans of your face never leave your iPhone – they’re never shared over the cloud, which massively limits the potential for hackers to gain access.

But when any sort of connection to another network gets involved, that’s when identity verification can get fishy. We’ve already watched how these measures can play out poorly when the technology is anything but rock-solid.

“No method of age verification is both privacy-protective and entirely accurate,” the Electronic Frontier Foundation writes. “These methods don’t each fit somewhere on a spectrum of ‘more safe’ and ‘less safe,’ or ‘more accurate’ and ‘less accurate.’ Rather, they each fall on a spectrum of ‘dangerous in one way’ to ‘dangerous in a different way.’”

In recent memory, we have some strong examples of how badly things can go when a company slips up on its security.

On Tea, an app that women use to share information about men they meet on dating apps, users have to upload selfies and photos of their IDs to prove that they are who they say they are. But users on 4chan, a misogynistic web forum, found that Tea left users’ data exposed, meaning that bad actors could access tens of thousands of users’ government IDs, selfies, and even direct messages on the platform, where women shared sensitive information about their dating experiences. What was once purported to be an app for women’s safety ended up exposing its users to vicious harassment, giving bad actors access to personal information like their home addresses.

These hacks were possible despite Tea’s promise that these images were not stored anywhere and were deleted immediately (evidently, those claims were false).

This kind of thing happens all the time – just look at TechCrunch’s security coverage. But it’s not just happening to new apps like Tea. World governments and trillion-dollar tech giants are certainly not exempt from data breaches.

These laws have inspired much backlash, but it’s not just because people are shy about linking their porn viewership to their government IDs.

In places where people can be prosecuted for political speech, anonymity is vital to allow people to meaningfully discuss current events and critique those in power without fear of retribution. Corporate whistleblowers could be unable to report a company’s wrongdoing if all of their online activity is linked to their identity, and victims of domestic abuse will find it even more difficult to flee dangerous situations.

In the U.S., the idea of being prosecuted for one’s political beliefs is becoming less theoretical. President Trump has threatened to send his political opponents to prison, and the government has revoked visas from international students who have criticized the Israeli government or participated in protests against the country’s military actions.

In the United States, twenty-three states have enacted age verification laws as of August 2025, while two more states have laws slated to take effect in late September 2025.

These laws mostly impact websites that host certain percentages of “sexual material harmful to minors,” which varies from state to state.

In practice, this means that pornographic websites must verify a user’s identity before they can access the website. But some sites, like Pornhub, have opted to simply block traffic from certain states.

“Since age verification software requires users to hand over extremely sensitive information, it opens the door to the risk of data breaches,” Pornhub wrote on its blog. “Whether or not your intentions are good, governments have historically struggled to secure this data.”

The definition of this term varies depending on who is enforcing the law.

At a time when LGBTQ rights are under attack in the U.S., activists have warned that laws like this could be used to classify non-pornographic information about the LGBTQ community, as well as basic sex education, as “sexual material harmful to minors.” These concerns appear well-founded, given that President Trump’s administration has removed references to civil rights movements and LGBTQ history from some government websites.

Texas’s age verification law – which was upheld in a Supreme Court ruling in June – was passed around the same time the state imposed other legal restrictions on the LGBTQ community, including limits on public drag shows and bans on gender-affirming care for minors. The drag show law was later deemed unconstitutional for violating the First Amendment.

The United Kingdom enacted the Online Safety Act in July 2025, requiring many online platforms to verify a user’s identity before allowing them access. If a user is identified as a minor, they won’t be allowed on certain websites. The Act applies to search engines, social media platforms, video-sharing platforms, instant messaging services, cloud storage sites – pretty much anywhere that you may encounter media or talk to someone.

In practice, this means that websites like YouTube, Spotify, Google, X, and Reddit are requiring UK users to verify their identity before accessing certain content. These requirements don’t just apply to pornographic or violent content – people in the UK have been barred from viewing vital education and news

The UK does not use one specific way of verifying one’s identity – individual websites can decide what mechanism to use, and Ofcom, the UK’s communications regulator, is supposed to oversee this implementation. But as we explained with the Tea example, we can’t trust that any given authentication tool will be safe.

Now, users who are subject to identity verification must decide if they want to freely access information or if they want to expose themselves to privacy risks.

Even if you don’t live in the U.K., you may be impacted

In the U.S., YouTube has already begun to roll out technology that is supposed to estimate users’ ages based on their activity, regardless of what age they listed when registering their account.

Yes, and the App Store charts in the U.K. prove it – after the Online Safety Act took effect, half of the top ten free apps on iOS were VPNs (Virtual Private Networks). We also saw VPN downloads spike after Pornhub access was blocked in many U.S. states.

When Pornhub was suspended in France, ProtonVPN said that registrations had spiked

You may have used a VPN before if you logged into your office desktop computer remotely, or if you spoofed your location so that you could watch British sitcoms for free from the U.S.

This introduces another issue: free VPNs don’t always have great privacy practices, even if they are advertised as such.

If you want to learn more about VPNs, TechCrunch has guides on what you need to know about VPNs and how you can decide if you need to use one.

Topics

Amanda Silberling Senior

Amanda Silberling is a senior

Send tips through Signal, an encrypted messaging app, to .100. For anything else or to verify outreach, email amanda.com.

October 27-29, 2025 San Francisco Put your brand in front of 10,000+ tech and VC leaders across all three days of Disrupt 2025. Amplify your reach, spark real connections, and lead the innovation charge. Secure your exhibit space before your competitor does.Last day to book is September 5

Most Popular OpenAI announces AI-powered hiring platform to take on LinkedIn Maxwell Zeff

Tesla’s 4th ‘Master Plan’ reads like LLM-generated nonsense Sean O'Kane

BMW, I am so breaking up with you Connie Loizos

Homicide at Burning Man turns Silicon Valley’s desert playground into a crime scene Connie Loizos

Nvidia says two mystery customers accounted for 39% of Q2 revenue Anthony Ha

Cracks are forming in Meta’s partnership with Scale AI Maxwell Zeff Marina Temkin

Mastodon says it doesn’t ‘have the means’ to comply with age verification laws Sarah Perez

X LinkedIn Facebook Instagram youTube Mastodon Threads Bluesky TechCrunchStaffContact UsAdvertiseCrunchboard JobsSite Map Terms of ServicePrivacy PolicyRSS Terms of UseCode of Conduct TelsaAnthropicTelexKlarnaMrBeastTech LayoffsChatGPT © 2025 TechCrunch Media LLC.