UK Social Media Ban: Ofcom Backs Facial Scans and ID

Four strict screening tools replace the honor system

Ofcom designated photo ID matching, bank-account checks, digital ID wallets, and facial age estimation as the only mechanisms capable of enforcing the threshold.

The UK government decided earlier this year that minors under 16 will be barred from social media networks, and Ofcom is now outlining how platforms have to prove it. In a rapid assessment published this week, the regulator confirmed that the honor system is dead.

Ofcom singled out four approaches: matching government photo ID, verifying ownership of a UK bank account, integrating third-party digital identities like Yoti, or using camera-based facial age estimation. Because roughly 90% of UK teenagers aged 16 and 17 already hold a bank account, financial data checks could shoulder much of the load.

Webcam-based facial scanning received a partial green light, though Ofcom framed it primarily as a secondary filter rather than an ironclad primary check.

Self-declaration and parental consent rejected

Regulators drew a hard line against the methods apps have relied on for decades. Simply asking someone to type in their birth year or check a box agreeing to terms of service won't cut it. Crucially, Ofcom also rejected standard parental consent, arguing that verifiable permission from a guardian is too easily faked by children on shared devices.

That stance mirrors a broader European trend toward hard verification; earlier this year, Greece banned social media for under-15s under similar statutory mandates.

The watchdog acknowledged that tech-savvy teens won't surrender quietly, noting surveys indicate around four in ten under-16s already intend to circumvent whatever filters launch. Still, the regulator insisted that high-friction barriers will keep the vast majority out.

Tech platforms bear the legal burden

Rather than mandating one universal government portal, Ofcom is placing the architectural headache squarely on companies. Speaking to the BBC, Chief Executive Dame Melanie Dawes warned that platforms will pick their own tooling, but regulators will inspect whether those systems actually protect personal data.

That requirement sets up an inevitable clash with civil liberties groups. Privacy advocates warn that forcing millions of British adults to submit passports or undergo biometric scans just to access online forums creates sweeping surveillance honeypots.

Parliament is expected to debate Ofcom's recommendations before year-end, giving social networks roughly eighteen months to build the infrastructure before penalties kick in during the first half of 2027.

Availability and timeline

The statutory ban applies directly to users residing in the United Kingdom, where legislation takes effect in the first half of 2027. Tech companies will be required to roll out the new age-gating mechanisms to all accounts originating from UK IP addresses or registered with UK phone numbers.

While US and EU users will not face UK statutory checks directly, platforms often deploy standardized global architectures once forced by major regulators, meaning similar digital ID prompts could eventually migrate across borders.