Home · Regulations · Age checks · United Kingdom

Age checks in the UK: what Ofcom’s rules mean for adult sites

Since 25 July 2025, Ofcom says every porn site that UK visitors can reach needs strong age checks. Ofcom's guidance says a “Yes, I'm 18” button or a date-of-birth box isn't highly effective, and that the check comes before any explicit content. Here's what Ofcom's guidance lists, what a good gate looks like, and how to see what your UK visitors meet.

Summary of the official sources · checked 12 October 2026 · Not legal advice. · Sources at the end

Applies from25 July 2025

WhoSites with porn that people in the UK can reach

RuleOnline Safety Act 2023 · Ofcom

Effort to fixFrom a few hours (gate) to 1–2 days (provider)

What does a UK visitor meet on your site? Find out in about a minute.

Free · private · we never download your images or videos

In short

Ofcom's guidance expects “highly effective” age assurance: a check that establishes age, not one that asks.
Ofcom's guidance lists self-declaration as not highly effective: no tick box, no date-of-birth field without evidence, no 18+ disclaimer in your terms.
Placement matters: nothing pornographic may be visible before the check. Ofcom’s guidance (§3.18) explicitly covers “content that is only visible or audible to users as a result of interacting with content that is blurred”.
Ofcom names seven kinds of method that can be highly effective, from photo-ID matching to credit-card checks. You stay responsible even with a third-party provider.

Does this apply to your site?

Four quick questions. If the first one is a yes, the rest decide how much work you have.

✓
Your site shows pornographic images, video or audio to anyone in the UKWherever your company is based. Ofcom looks at whether UK users can reach the content.
✓
Your gate is a button, a tick box or a date-of-birth fieldOfcom lists self-declaration as not capable of being highly effective.
✓
Thumbnails, trailers or blurred previews sit behind or next to the gateOfcom expects that “no pornographic content … can be accessed by users before they verify their age” (Part 5 guidance §4.7).
?
Your explicit content is only user uploads, or only textOfcom’s guidance treats user-generated content under a different part of the Act, and text-only content is excluded from this one. A lawyer can confirm which part covers your site.

What regulators expect

Pick a method Ofcom lists as capable. Open banking, photo-ID matching, facial age estimation, mobile-network checks, credit-card checks, email-based age estimation or digital identity services.
Put the check at the front door. Ofcom calls a front gate, where nothing explicit loads before the check, the safest approach. For blur gates, Ofcom says the blurring “needs to be sufficiently strong and across enough content”.
Let the server decide. The provider should tell your server the result directly. Then only hand out pages and media files to visitors with a valid, signed proof.
Lock the files, not just the page. Media URLs, sitemaps and media lists must not open the content around the gate.
Don’t point UK users to workarounds. Ofcom’s guidance says not to publish content that tells UK users how to get around the check, such as VPN links.

Ofcom also expects the process as a whole to be technically accurate, robust, reliable and fair. A good provider can tell you how they meet those four criteria.

What a good UK age gate looks like

Verify your age to continueThis site has adult content. Checking takes about a minute.

Front gate

Logo, a short explanation and one button to the check. Nothing explicit loads yet.

📷 Take a quick selfieor verify with your bank

A real check, not a question

The provider’s step, for example a selfie for age estimation or a card check.

18+ · Verify to view

Neutral previews only

If anything is shown before the check, make it non-explicit: logo, text, neutral art.

How No451 checks your site

We visit your site from a UK connection like a first-time visitor, record what loads before the gate, and ask for the headers of a few media files. We never download images or videos and never try to break your check unless you’ve verified you own the site.

Should fixYour age check only asks for a date of birth Example result

A first-time visitor sees a date-of-birth form before the content. Anyone can type any date. We found no age-check provider on the page.

The fix: switch to a method that actually checks age, and make the server, not the browser, decide who gets in.

Your age checkWhat kind of check a first-time visitor meets

Before the checkWhat’s visible behind the gate

Media filesWhether files open without passing

Public indexesSitemaps and media lists

Fake “over 18” cookieWhether a made-up cookie opens the gate

Common mistakes

A pretty modal over a fully loaded page. The content is already in the HTML; the overlay hides it only for people who don’t look.
Checking once, then a plain “over18=1” cookie. Anyone can set that cookie. Use a signed, short-lived proof.
Explicit thumbnails on the gate page. Ofcom expects that no pornographic content can be accessed before the age check (Part 5 guidance §4.7).
Forgetting media URLs and sitemaps. The files often open directly, gate or not.

Enforcement

Ofcom enforces these duties and has already fined providers. Under the Online Safety Act, courts can also order a site to be blocked in the UK (Ofcom).

Questions operators ask

Is a “Yes, I’m 18” button enough in the UK?

No. Ofcom’s guidance lists self-declaration, including tick boxes and date-of-birth fields without evidence, as not capable of being highly effective age assurance.

Does this apply if my company is outside the UK?

It depends on whether people in the UK can reach your content, not on where you are based. If UK visitors can open your site, plan for these rules.

Can I blur the content until the visitor is checked?

Ofcom describes blur gates but says they carry significantly more risk than a front gate. Ofcom says the blurring “needs to be sufficiently strong and across enough content”. Ofcom’s placement guidance describes a front gate, with nothing explicit before the check, as carrying less risk.

Which age-check provider should I use?

Ofcom doesn’t approve individual providers. It lists kinds of method that can be highly effective. Ask providers how their method fits those kinds and how they meet Ofcom’s four criteria.

Sources

Not legal advice. This page summarises and links to primary sources; it does not tell you what the law requires of your specific site. Related: Glossary: highly effective age assurance · United Kingdom overview · Fix guide: lock your media files

See what a UK visitor sees. Then close the gaps.

One scan from a UK connection shows your age check, what’s visible before it and whether your files open without it, with evidence and fixes.

No signup for the first result · built by people who run an adult site themselves