How UK Kids Are Beating Age Checks Online—and What's Going Wrong

Nearly one in three UK children have found ways around age verification systems within a two-month period, according to new research from Internet Matters. The finding exposes a significant gap between what the UK's Online Safety Act promises and what's actually happening on the ground.

The research surveyed 1,270 UK children aged 9-16 and their parents. It found that 32% of the children admitted they had bypassed age checks, and nearly half of them described the systems as straightforward to get past. The researchers also documented the specific techniques kids use: entering false birthdates, drawing facial hair on themselves, or applying makeup to look older when facing camera-based verification systems.

During the same period, 49% of children said they came across harmful content online. That figure suggests that current age verification systems are not creating the protective barriers policymakers had in mind.

Parents Are Part of the Problem

Here's an unexpected finding: 16% of UK parents acknowledged helping their children circumvent age verification checks. This creates a tricky problem that no technical fix alone can solve.

The Online Safety Act requires platforms to use "strong age verification or estimation techniques" before allowing access to age-inappropriate content. But the law cannot force parents to cooperate with these safeguards. A parent who wants to help their child access something has the ability to do so—and some do.

Why These Systems Fail

Age verification systems have two main weaknesses. Camera-based systems try to guess a user's age by analyzing their face, but they cannot detect when someone is deliberately trying to look older through makeup or fake facial hair. Date-of-birth verification is even simpler to defeat: you just enter a false date. Many platforms have not yet moved to document-based verification, which would require uploading a photo of a government ID.

This pattern is not new. In the early days of the commercial internet, credit card requirements served as age gates, and young users found workarounds then too. The techniques have evolved, but the fundamental challenge remains: basic information that users provide themselves is easy to lie about.

A Global Problem

The UK findings align with similar research from other countries trying to regulate underage platform access. Children in Australia have shown similar capability to bypass that country's social media age restrictions, according to Australian regulators. Roughly half of US states have passed or are considering laws that require platforms to block underage users, yet children navigate these patchwork rules with relative ease.

This suggests that the problem is not unique to the UK or its regulatory approach. Current age verification technology appears to struggle against determined users, no matter where the rules come from or how they are written.

Platforms Are Inconsistent

The research reveals significant variation in how different platforms interpret and apply age verification requirements. The Online Safety Act mandates "strong" verification techniques but gives platforms considerable freedom in choosing which methods to use and how strict to be.

This flexibility was meant to let each platform operate according to its own design and user base. But it may have the opposite effect: children learn which platforms have weaker verification and share that information with their peers. Over time, it becomes clear which platforms are easier to get past.

What This Means Going Forward

The Internet Matters research raises a fundamental question: can purely technical age verification actually work when determined young users are working to get around it.

Current technology has structural limitations. Camera-based systems are not yet sophisticated enough to spot deliberate attempts to look older. Date-of-birth fields invite false entries. These are not design flaws so much as the nature of verifying age online when the user has strong motivation not to cooperate.

In my view, the research points toward a different approach. Better verification technology is necessary, but it may not be sufficient. Effective child safety online may require combining improved technical systems with better digital literacy education and clearer guidance for parents about their role in keeping their children safe.

Platforms might explore verification methods that create more friction for bypass attempts—such as document verification, parental account linking, or multi-factor age confirmation. Each of these approaches brings its own tradeoffs. Requiring a government ID, for example, may verify age more reliably but also raises privacy concerns and creates friction for legitimate adult users.

The broader issue is whether age-based access restrictions can realistically work in digital environments where identity verification relies mostly on information users provide about themselves. As the UK and other countries evaluate the early results of their age verification requirements, the Internet Matters research makes clear that what exists today needs significant improvement if it is to achieve its intended goal.