Ofcom Outlines Four Ways Social Media Platforms Could Enforce UK Under-16s Ban

Ofcom has outlined four age-verification methods that could be used by social media companies to enforce the UK Government’s proposed ban on under-16s accessing social media platforms.

The regulator published its assessment on 29 October 2026, setting out how technology companies could reliably establish whether users are aged 16 or over before allowing them to access restricted services.

The proposed ban, announced by the Government in June, is intended to strengthen online protections for children. However, its success will depend heavily on social media companies implementing effective age-verification systems.

Ofcom has identified four methods that it believes are currently capable of providing highly effective age assurance at the age of 16.

Four age-verification methods

The first method involves photo ID matching, where users provide an identity document such as a passport or driving licence. The system checks the document’s details and compares its photograph against a live image of the person completing the verification process.

Ofcom estimates that approximately 94% of people aged 16 and over in the UK have either a passport or driving licence. However, around 150,000 young people aged 16 and 17 have neither.

The second option involves banking-based age checks. With the user’s permission, social media platforms could access age information held by financial institutions. Since approximately 90% of 16- and 17-year-olds have a bank account, Ofcom believes this could provide a convenient alternative to repeatedly submitting identity documents.

Digital identity services represent the third option. These services allow individuals to verify their identity and age digitally, potentially using an identity document during an initial verification process before subsequently proving their age through a digital identity provider.

The fourth method uses facial age estimation technology. This analyses facial characteristics to estimate a person’s age without necessarily requiring them to submit identity documents.

However, Ofcom acknowledges that facial age estimation is not always accurate, with some technologies having a margin of error of several years around the age of 16.

To address this, the regulator suggests platforms could adopt an approach similar to the Challenge 25 system used by retailers selling alcohol. Where facial estimation indicates someone may be under 16, an additional identity verification check could be required.

Privacy and security concerns

The introduction of mandatory age verification will inevitably involve the processing of personal information, raising questions about privacy, data protection and how identity information will be handled.

Ofcom says the available verification methods can be implemented in ways that protect users’ privacy and comply with existing data protection legislation.

The regulator will continue working with the Information Commission to ensure appropriate safeguards are maintained.

There are also concerns that children could attempt to bypass the restrictions by using another person’s identity documents, creating alternative accounts or finding other ways around verification systems.

Ofcom acknowledges that no age-verification system will be completely resistant to circumvention.

It believes social media companies should introduce additional measures, including allowing users to report suspected underage accounts and using age-estimation technology to identify accounts that may have bypassed initial checks.

The regulator also plans to monitor how effectively the systems work and publish research into attempts to circumvent the restrictions within 12 months of the ban coming into force.

App stores could face greater scrutiny

Alongside its assessment of age verification, Ofcom has also highlighted the potential role of app stores in improving online safety.

Research published by the regulator found that three-quarters of children who use the internet reported that applications downloaded from app stores were their primary means of accessing the internet.

However, Ofcom found that the app stores it examined generally rely on children declaring their own age, with only limited additional verification in certain circumstances.

The regulator believes app stores could do more to protect younger users by introducing stronger age checks and providing better information about the risks associated with applications.

Although app stores are not currently regulated under the Online Safety Act, Ofcom’s findings raise the possibility that the Government could consider bringing them within a future regulatory framework.

Government expected to publish further details

The Government intends to publish its first set of regulations for the proposed social media restrictions before the end of 2026.

Ofcom is already preparing draft guidance for technology companies and expects to consult on the requirements once the Government’s regulations have been presented to Parliament.

The regulator has also warned that it will be prepared to take enforcement action against companies that fail to comply when the restrictions come into force next year.

While the proposed ban represents a significant change to how children access social media in the UK, Ofcom recognises that effective enforcement will require more than simply introducing an age-verification requirement.

The combination of identity checks, banking information, digital identity services and facial recognition technology could provide a stronger framework for restricting access, although privacy concerns and attempts to bypass the systems are likely to remain significant challenges.