Frequently Asked Questions
Quick answers to the most common questions about Australia's age verification laws.
Do I have to give my ID to use social media?
Not necessarily. Platforms must verify your age, but they cannot force you to use government-issued ID. The law requires alternative methods to be available. Options may include facial age estimation (a selfie processed by AI), credit card verification, or digital identity wallets. If a platform only offers ID upload, they may not be fully compliant with the law.
Is using a VPN illegal in Australia?
No. VPNs are legal in Australia. They are widely used by businesses, government agencies, journalists, and everyday people for privacy and security. There is no law against using a VPN. VPN downloads surged when age verification laws took effect — three VPN apps appeared in the top 15 most downloaded free apps on the Australian App Store on March 9, 2026.
What age do I need to be?
There are two thresholds:
16+ for social media platforms (Instagram, TikTok, Snapchat, X, YouTube, Reddit, Twitch, Kick, etc.). Under-16s cannot create or hold accounts.
18+ for restricted material (pornography, high-impact violence, self-harm content, explicit AI chatbots, R18+ games). Adults must verify their age to access this content.
Is the government watching what I access?
The government does not collect or manage verification data. Age verification is handled by the platform or their chosen third-party provider. The government sets the rules but doesn't run the verification system itself.
That said, privacy advocates have raised concerns about "function creep" — the risk that verification infrastructure built for age checks could later be expanded for other purposes. This is why using privacy tools like VPNs and choosing the least invasive verification method matters.
What happens to the data I provide for verification?
This depends on the method used. Facial age estimation providers claim they process the image and discard it without storing it. ID-based verification providers typically retain your data for a period (check their privacy policy). All methods must comply with Australian privacy laws, including data minimisation — providers should only collect what's necessary for the age check.
Why is Pornhub blocked in Australia?
Aylo, the company that owns Pornhub, RedTube, YouPorn, and Tube8, chose to block all Australian IP addresses rather than implement age verification. This is the same approach they took in several US states (Louisiana, Texas, and others) when those states passed similar laws. Other adult sites (like xHamster) chose to comply by implementing ID-based verification.
What are the penalties for platforms that don't comply?
The eSafety Commissioner can impose penalties of up to A$49.5 million per breach. Enforcement focuses on systemic non-compliance rather than individual violations. Australians can report non-compliant services directly to eSafety.
Can I get in trouble as a user?
The law places responsibility on platforms, not users. There are no penalties for individuals under the current legislation. Minors who attempt to access restricted content are not penalised — the obligation falls on the platform to prevent access.
Are messaging apps affected?
General messaging apps are exempt. WhatsApp, Facebook Messenger, Signal, and Telegram do not require age verification under these laws. Only messaging services that specialise in adult content are covered.
What about AI chatbots like ChatGPT?
AI chatbots capable of generating explicit content (pornography, extreme violence, self-harm material) must verify users are 18+ before allowing access to that content. Some AI services have restricted Australian access, and some AI apps have been removed from Australian app stores. General-purpose AI use (asking questions, writing assistance, coding help) is not affected.
Do these laws actually protect children?
This is actively debated. Supporters argue the laws create meaningful barriers that reduce accidental exposure to harmful content. Critics point out that tech-savvy minors can bypass restrictions using VPNs, that age estimation technology has accuracy issues (particularly for certain demographics), and that the laws push users toward less regulated and potentially more dangerous corners of the internet.
Australia's approach has been described as a "world-first" test case. An independent review of the law's effectiveness is required within two years of implementation.
How can I protect my privacy while complying?
We've written a step-by-step guide covering the most practical privacy protections: choosing the least invasive verification method, using a VPN, using a password manager, and more.
Protect your privacy with a VPN
We may receive a commission if you sign up through these links. This doesn't affect the tools or information we provide.
This guide is for educational purposes only and does not constitute legal advice. Information is current as of March 2026 and may change as laws and platform policies evolve.