Age Verification

Many offers on the internet are not intended for all age groups. These include alcohol and tobacco shops, gambling, pornography, or films rated 18+. Age verification is the umbrella term for the methods used by a website or app to check whether a person is old enough. The simplest variant is a window asking whether you are of legal age — anyone can click past that. More elaborate methods require genuine proof, such as an ID card or a bank connection. In Germany, this is not a voluntary service offered by providers, but in many cases is legally mandated.

From click-through window to legal pressure

For decades, a click on a button was enough online. For the protection of minors, this was practically ineffective, because no one checked the claim. Studies have shown for years that children and teenagers can easily access content that should be blocked for them. That is why several states have tightened the rules.

Since 2025, the United Kingdom has required a robust check for pornographic offerings. Several US states have enacted similar laws, and the European Union is working on its own solution for proof of age. In Germany, the Interstate Treaty on the Protection of Minors in the Media (Jugendmedienschutz-Staatsvertrag) stipulates that certain content may only be accessible within a closed user group. The responsible review body, the KJM, lists methods suitable for this purpose.

For companies, this is both a cost factor and a risk at the same time. Anyone who fails to check risks fines or network blocks. Anyone who checks too strictly loses customers, because many people drop off as soon as they are asked to show their ID. It is precisely in this gap that a dedicated market for verification service providers has emerged.

ID card, facial age estimation, and zero-knowledge

The classic method is the document check. You photograph your ID, often together with a selfie, and a service provider compares the two. Some procedures additionally involve a brief video check with a human. This is secure, but slow and uncomfortable for many people.

Newer is age estimation via camera. An AI model — that is, a program that has learned from millions of sample images — estimates the approximate age from the face. It does not deliver an exact number, but a probability. That is why such systems work with a safety margin: anyone estimated to be under 25 is additionally asked for ID. The accuracy rate depends heavily on how diverse the training images were — for certain skin tones and age groups, the error rates are measurably higher.

The most data-sparing approach is called zero-knowledge proof. In this method, a third party — such as a government authority or a bank — confirms only a single fact to the website: this person is over 18. Name, date of birth, and address remain secret. This is comparable to a bouncer who simply nods instead of passing your ID around. The planned EU wallet for digital identities, the EUDI Wallet, is intended to work exactly this way.

Where you encounter the age check

In everyday life, you encounter age verification more often than you might think. A Google account requires proof when accessing certain YouTube videos. Steam and console shops block games rated 18+. Online pharmacies, betting providers, and alcohol delivery services also check. Even unstaffed supermarket checkouts now use cameras for age estimation.

In the news, the term usually appears in the context of controversy. Privacy advocates warn that ID data can fall into the wrong hands. This has happened repeatedly: verification service providers have been hacked, and selfies and ID scans have ended up online. Critics also point out that stricter rules drive users toward unregulated sites or into VPN services that disguise their own location.

A common misconception is that age verification is the same as identification. The two must be considered separately. Identification establishes who you are; age verification only establishes whether you exceed an age threshold. Good systems therefore answer only the second question and store nothing further afterward.