Age Verification Is How You Build a Real-Name Internet

The US, UK, EU, and Australia are suddenly moving in lockstep on the same idea. Mandatory age verification, sold as a way to keep children safe online. It’s a hard thing to argue against. But step back and look at how the machinery actually works, and a more uncomfortable picture emerges: the thing being protected isn’t the kid. It’s the system.

Let’s unfold the real blueprint behind age verification.

When “How old are you?” becomes “Who are you?”

The technical premise is simple. Before you enter certain sites, you have to prove you’re over 18. The catch is the word “prove.”

Asking for a birthdate accomplishes nothing. Anyone can lie. So to have teeth, the check eventually needs something strong: a government-issued ID, a face scan, a credit card. And here’s the trap — to confirm that you’re an adult, the system first has to confirm who you are.

That’s the pivotal move. The act of asking your age becomes technically inseparable from the act of demanding your identity. Someone who just wanted to post anonymously now has to flash an ID to walk through the door. The people supposedly being protected are minors. The people getting checked at the gate are everyone.

The data never really disappears

The vendors always say the same thing. “We verify, we don’t store.” We have almost never seen that promise survive contact with reality.

ID photos, facial data, card numbers — all of it passes through someone’s server. Verification contractors, the site operators, and a sprawl of middlemen wiring them together. Each one is a fresh breach point. Picture uploading your ID to an adult site, then watching the entire roster of names leak in a hack. That’s a scenario nobody wants to think about.

The scarier part is that even if “we don’t store it” were true, a problem remains. The timestamp of verification, the access logs, the link between which identity entered which site. That’s enough to reconstruct a person’s movements without ever keeping a byte of the content. Not what you watched, but who went where — that alone completes the profile.

The real play is attribution

This is the crux. Strip the framing down and the practical effect of age verification isn’t blocking minors. It’s stapling a name tag to every utterance.

The internet’s power has always come from anonymity. Whistleblowers exposing corporate fraud. Citizens in authoritarian states routing around censorship. Marginalized people speaking up without fear of retaliation. All of that worked because speech was hard to tie back to a specific person.

Lay down age-verification infrastructure and that premise collapses. Once an identity-to-account link exists under the banner of “adult verification,” that link gets repurposed. First it’s porn, then gambling, then “harmful information,” and at some point “information the government has deemed false.” Identity infrastructure, once installed, only ever expands its scope. The technical term for this is function creep. One security camera becomes the first button on a neighborhood-wide surveillance grid.

“For the children” is an unbeatable argument

What makes this policy genuinely dangerous is that opposing it is nearly impossible.

The KIDS Act–style bills in the US, the UK’s Online Safety Act, the EU’s parallel rules — all lead with child protection. Who’s going to stand up and argue for putting kids in harm’s way? So the debate tilts before it even begins. Raise a privacy concern and the reflexive answer comes back: “So what about the children?”

But protection and surveillance are not the same thing. There are many ways to keep kids safe. Device-level parental controls. OS-level age signals. Zero-knowledge proofs that confirm a fact without leaving a data trail — all of this already exists. There is no need to bind every citizen’s identity to every utterance. And when that’s the method that keeps getting chosen anyway, it’s worth asking whether protection was ever really the point.

Anonymity is not a crime

To be straight with you: this isn’t a hot dataset pulled from the last month of community chatter. It’s a reading of a legislative pattern repeating across countries, and an interpretation of the structure underneath it. But the direction of that pattern is unmistakable.

Remember one thing. The surest way to verify someone’s age is to verify their identity, and the moment identity is verified, anonymity is gone. Peel off the “protection” wrapper and what’s left is infrastructure that clips a name to every click.

So here’s the question. Trading away everyone’s anonymity to protect children — is that really an even exchange? Or is something else being designed, with protection as the cover story?