How Age Verification Works

Not all verification methods are equal. Here's what each one collects, who stores it, and the privacy trade-offs.

The rule

Platforms must verify your age, but they cannot force you to use government-issued ID. The law requires platforms to offer alternative methods. If a platform only offers ID upload, they may be non-compliant.

Here are the main methods platforms are using, ranked from lowest to highest privacy impact:

Medium risk

Facial Age Estimation

How it works: You take a selfie. An AI algorithm estimates your age from your face. The platform gets a yes/no result (over or under the threshold). The selfie is not supposed to be stored.
Data collected Facial image (processed, reportedly not stored)
Who processes it Third-party provider (e.g. k-ID, Yoti)
Accuracy Variable. Less accurate for darker skin tones, people with facial differences, and ages near the cutoff
Privacy concern Biometric data sent to a third party. "Not stored" claims are difficult to verify independently.

Used by: Snapchat, Facebook, Instagram, X (as an option)

High risk

Government ID Upload

How it works: You upload a photo of your driver's licence or passport. A third-party provider reads your date of birth and confirms you meet the age threshold.
Data collected Full name, date of birth, ID number, photo, address (depending on document)
Who processes it Third-party identity verification company
Accuracy High — but reveals far more data than necessary for an age check
Privacy concern Creates a data trail linking your identity to the platform. You're trusting a company you may know nothing about with your most sensitive documents.

Used by: X (as an option), xHamster, some adult sites

Medium risk

Credit Card Check

How it works: You enter credit card details. Holding a credit card in Australia generally requires you to be 18+. The platform verifies the card is valid.
Data collected Credit card number, expiry, cardholder name
Who processes it Payment processor or third-party verification provider
Accuracy Moderate — minors can use a parent's card
Privacy concern Creates a financial record linking your identity to the platform. Credit card data is a high-value target for hackers.

Used by: Some adult sites, app stores

Lower risk

Digital Identity Wallet

How it works: You use a government digital identity system (like Australia's myGov/Digital ID) or a third-party digital wallet to confirm you meet the age threshold. The platform only receives a yes/no — not your actual identity documents.
Data collected Age confirmation only (yes/no). Full identity stays in the wallet.
Who processes it Government or accredited identity provider
Accuracy High
Privacy concern Better than ID upload (less data shared), but still creates a record that you accessed the platform. Concerns about government-level function creep.

Used by: Limited adoption so far. Likely to grow.

The bottom line

Every verification method involves a trade-off between proving your age and exposing your identity. The privacy-preserving options (digital wallets, zero-knowledge proofs) are technically possible but not yet widely adopted.

For now, the most practical steps you can take are:

Full privacy protection guide →

This information is for educational purposes only. Verification methods and platform implementations may change.