What is Age Gating?

Age gating is the practice of putting content, a product, or an account behind a check that screens users by age before access is granted to them. Under the UK’s Online Safety Act 2023, a gate only discharges a legal duty if it meets Ofcom’s standard for highly effective age assurance, a standard that self-declaration of age does not meet.

Content is age gated when a user cannot reach it until an age check returns a clear pass. The check sits in front of the content, not alongside it, and the gate is the point where access is either granted or refused.

What typically sits behind a gate?

• Pornography and other adult material
• Gambling, betting, and lottery products
• Alcohol, tobacco, vaping, and cannabis retail
• Age-rated games, films, and explicit music
• Social media accounts in minimum-age jurisdictions
• Knives, solvents, fireworks, and other restricted goods

Age gating failure commonly occurs due to wrong scoping. Teams gate the homepage and leave deep links, embedded players, search pages, and app store previews open, so age-gated content stays reachable by anyone arriving sideways.

Age gating examples by sector

These age gating examples split on one point that matters for compliance, which is whether the gate protects the transaction or the content itself. Gating checkout stops under-18 people from buying alcohol. It does nothing about an 18-rated trailer playing on the product page.

Age gating methods and how strong each one is

Ofcom names seven approaches that are capable of being highly effective, and names self-declaration and payment methods that do not require the holder to be 18 as approaches that are not as capable.

Ofcom assesses any method against four criteria: technical accuracy, robustness, reliability, and fairness. Robustness is where most deployments fail, because a gate a user defeats by pressing back and entering a different date was never a control. Most operators route the check to a dedicated age verification provider rather than maintain it in-house.

Age gating vs age verification

Age gating is the access control, and age verification is one way of satisfying it. The two are often used interchangeably, and that is where compliance arguments start.

The difference between an age gate and age verification is therefore one of function, not strength. A gate backed by document checks and facial age estimation is a strong control. The same gate backed by a date-of-birth field is a notice, and regulators treat it as one.

Evidence on whether age gates are effective

Ofcom published the first regulator-level dataset in its Use of Age Assurance Report 2026, covering July to December 2025. Across 32 services analysed, more than 69 million age checks were completed, a 23-fold increase on the previous six months.

The behavioural effect is visible in the traffic data:

• Services that deployed age assurance saw sharp declines in user traffic after implementation.
• Services without age checks stayed broadly stable or gained users, with one non-compliant site’s estimated daily visitors rising from around 10,000 to 25,000.
• 64 of the top 100 UK pornography services had deployed age checks as of June 2026, up from 41 in August 2025.
• 5% of children reported using a VPN in the prior six months to reach age-restricted content, a figure Ofcom notes may understate the true rate.

Ofcom’s assessment is that circumvention appears low, with the caveat that some activity may not be captured due to reporting bias. The practical reading: gates work on the population they are built for, and displace a determined minority to services that have not implemented them.

How do different regions regulate age-gated content?

Two details decide most implementations. The Commission’s Article 28 guidelines of 14 July 2025 recommend age verification for adult content and gambling, and age estimation where a lower minimum age applies. The FTC’s COPPA guidance requires the age screen itself to be neutral and protected against back-button retries.