UK regulator outlines age checks for social media ban on under-16s
Ofcom has outlined age-check methods platforms could use before a planned UK ban on social media for under-16s takes effect in 2027.
According to the BBC, Ofcom has published guidance on the methods it expects social media companies to use to keep under-16s off their platforms. The regulator says photo-based ID, digital ID, banking checks and facial age estimation can all help prove that someone is 16 or over.
TechRadar reports that Ofcom identified four approaches it considers highly effective and also named methods it regards as not effective. The coverage does not spell out which weaker options were ruled out, so the full picture will depend on the detailed guidance.
The guidance follows a June decision by the UK government to ban under-16s from social media. Enforcement is scheduled to begin during the first half of 2027, which gives platforms a defined window to make changes. TechRadar's coverage frames the central difficulty as confirming age without turning ordinary internet use into an identity check.
TechRadar also reports that around four in 10 under-16s plan to try to get around the ban, a figure that suggests enforcement will be tested from the start.
Background
The UK government announced in June that under-16s should be barred from social media platforms. Enforcement is scheduled to begin during the first half of 2027, leaving companies a limited period to put workable checks in place.
Ofcom sits at the center of the country's online safety regime. It enforces the Online Safety Act, a 2023 law that requires services hosting user content to protect people, particularly children, from harmful material.
Age assurance, the umbrella term for checking how old someone is online, has become a common concern for regulators. Methods broadly split into document-based checks, which compare details against an official record and raise questions about who holds that data, and facial age estimation, which analyzes a face to guess an age range without identifying the person. Such estimates can be less precise near age thresholds. Simpler signals, such as how long an account has existed, are generally considered weak on their own.
Other countries have explored similar limits. Australia has moved to set a minimum age for social media accounts, and several European governments have debated comparable proposals. Each approach tries to protect young people without forcing every adult to prove their identity to get online.
Why it matters
The central tension is privacy. Age checks that work reliably tend to require some form of personal data, whether an identity document, a bank record or a biometric scan. Critics argue that collecting this information creates new risks, especially if databases are breached or data is reused beyond its original purpose. Supporters counter that without some verification, a rule limiting access is hard to enforce at all.
Enforcement also depends on behavior. With around four in 10 under-16s reportedly planning to try to get around the ban, any system will face determined workarounds. Teenagers can borrow an older person's identity, use a virtual private network or move to services with looser rules. How regulators respond to that gap will shape whether the rules change behavior or simply move it elsewhere.
For platforms, the stakes are commercial as well as legal. Age checks add friction at sign-up, cost money to run and may reduce the number of people who complete onboarding. Companies that build reliable systems early could influence the standards others must follow, and the UK's choices may shape how other governments approach the same problem.
What to watch
Watch for Ofcom's detailed guidance and any follow-up consultations, since the broad outline will need technical specifics. Platform announcements will also matter: which services adopt which methods, and whether they settle on the same checks or a mix. Data handling is another key area. Questions about how long verification data is kept, who can access it and whether it can be deleted will shape public trust. Finally, keep an eye on the run-up to the first half of 2027, when enforcement is scheduled to begin, and on how other countries respond to the UK model.
Viewpoints
Commentary from our columns: three angles on this story.
The Rulebook privacy, safety and regulation
The most important phrase in this story is the warning against turning ordinary browsing into an identity check. Age rules for social media are a legitimate goal, but the method used to enforce them determines whether they protect young people or quietly build new collections of personal information. Passport scans, bank records and face data are all sensitive, and each carries its own risk if it is leaked, misused or kept longer than necessary.
What the UK should insist on is a clear data standard. Verification should happen through an independent provider where possible, return a simple yes or no to the platform, and then discard the underlying information. Platforms should not be free to keep identity documents for their own purposes. Regulators should also publish how they will audit compliance, because a promise of privacy is only as good as the checks behind it.
Nothing here forces a choice between child safety and privacy. It requires treating the verification step as a serious system with its own rules, not an afterthought bolted onto the ban. Ofcom's guidance is a useful start, but the details of retention, access and deletion will decide whether the policy earns public trust.
The User what changes for people who use it
For a teenager, the change may look simple on the surface: an account that once worked may stop working. For parents, it means new steps and new questions about which apps their children can use. For adults, the bigger shift is likely to be the prompts to prove something about themselves when signing up or logging in, even if the check itself is quick.
The choice of method matters a great deal. A photo ID check takes effort and asks people to hand over a document. A facial scan is quicker but can feel intrusive and may not suit everyone. Banking checks depend on a financial account that many young people do not hold. Each method leaves some people out, so the rules will not feel the same in every household.
TechRadar's reporting that around four in 10 under-16s plan to get around the ban suggests that everyday habits will matter as much as the law itself. Families should expect clearer guidance from platforms over the next year and should not assume a single setting will solve everything. One of the most useful things a parent can do is talk with a young person about why the rules exist and what they are meant to protect.
The Skeptic open questions and weak points
The guidance sounds reassuring, but several questions remain open. The most obvious is how a ban will be enforced against a determined teenager who has a parent's phone, a borrowed identity or a virtual private network. A rule that is easy to announce and hard to police can make regulators look busy while real behavior changes little.
There is also the question of which methods actually work. Ofcom's identification of four approaches as highly effective is a welcome signal, but effectiveness depends on error rates, and the reporting does not describe them. Facial age estimation can be less accurate near an age threshold, and a 15-year-old and a 16-year-old may look alike. How many children will be wrongly blocked, and how many adults will be forced into appeals?
Finally, the burden falls unevenly. Large platforms can absorb the cost of new checks, while smaller services may struggle. The skeptical reading is that the rule could entrench the biggest companies while pushing younger users toward less regulated corners of the internet. Those concerns are not reasons to abandon the goal, but they are reasons to ask hard questions before enforcement begins in 2027.