Age Verification Theatre

In 2025, the UK's Online Safety Act introduced stricter age verification requirements. Platforms scrambled to comply. Children bypassed the new systems with makeup-drawn moustaches.

That's theatre.

Research from verification providers shows nearly one in four attempted sign-ups at age-gated sites are suspected minors. They use VPNs, borrowed IDs, deepfake apps, photos of older siblings. The simplest method remains surprisingly effective: entering a false birth date and clicking continue.

Laws keep getting stricter. Australia banned under-16s from social media in December 2025. Multiple US states passed age verification requirements. The EU's Digital Services Act mandates robust age assurance. Platforms face millions in fines for non-compliance.

None of this changes the fundamental problem: age verification at scale relies on children being honest or technology being perfect. Neither assumption holds.

I understand why governments focus here. Age verification feels like a solution. It's measurable. It's enforceable. It creates accountability. Platforms either verify ages or face penalties. The logic seems sound.

But it treats the symptom rather than the cause. The reason we need age verification is because platforms allow millions of strangers to interact. If you build architecture where children can only access curated groups created by adults they know, the age verification problem becomes different.

When Ian and I think about oodlü, responsible adults create groups for children under their care. Parents create groups for their children and their children's friends. Teachers create groups for their classes. The children in those groups can only interact with each other.

Cross-group communication requires both adults to actively agree. A teacher wanting to connect their class with another teacher's class has to contact that other teacher directly, share details in the real world, and both explicitly consent. If one registered adult is genuine and the other is a minor pretending to be an adult, that becomes immediately obvious during real-world contact. The fake adult can't maintain the pretence when actual adults are coordinating directly.

This architecture prevents children from connecting outside groups that have been directly validated and agreed by their responsible adults. The verification happens through human contact between adults who know the children involved, rather than through technology trying to verify millions of individual children's ages.

Does this limit scale? No. Absolutely not. The number of children can be exactly the same as any other platform. What changes is how they interact. Children within the same group can communicate freely via chat and voice. Children from different groups might share the same environments, participate in activities together, interact with objects and challenges side by side. What they can't do is communicate directly. No chat. No voice. No mechanism that could constitute harm or abuse between strangers.

The scale stays the same. The growth trajectory can be identical. What changes is the interaction model. And with it, the safety outcomes.

Age verification theatre continues because we keep trying to verify individuals on platforms designed for mass access. Better facial recognition. Stricter ID checks. More sophisticated liveness detection. Children will keep finding workarounds because the incentive to bypass is high and the methods to do so are readily available.

Current age verification measures struggle with basic evasion: fake birth dates, borrowed documents, edited selfies. Even sophisticated biometric systems fail when a determined 14-year-old uses their 17-year-old sibling's phone or photoshops a moustache onto their face.

The alternative is architecture that doesn't require perfect verification at mass scale. Build platforms where stranger danger doesn't exist because strangers can't access children. Where inappropriate content can't reach children because content filtering happens at the group level with adult oversight, rather than relying on platform-wide age gates that children routinely bypass.

This won't satisfy legislators who want universal age verification mandates. It doesn't create a one-size-fits-all solution that governments can enforce across all platforms. But it might actually work.

Age verification theatre exists because we're trying to make unsafe architecture safe through verification. It's reactive. It's post-hoc. It assumes you can accurately verify millions of children who are actively motivated to lie about their age so they can access content or spaces their friends are already in.

We're trying something different. Don't build architecture that requires perfect age verification. Build architecture where the verification problem is manageable because the structure itself prevents the harms age verification is meant to address.

The theatre will continue. Laws will get stricter. Technology will get more sophisticated. Children will keep finding ways around it because the fundamental problem remains: you're trying to verify millions of individuals on platforms designed for mass stranger interaction.

Different architecture creates different problems. Smaller, more manageable problems. Problems that don't require theatre to pretend we've solved them.

We'd love to hear your thoughts on this. Find us on the social channels linked at the top of the page.