UK Sees Dramatic 30% Drop in Traffic to Adult Sites Following New Age Restrictions

Summary

The United Kingdom has introduced stringent age verification measures aimed at restricting access to adult and harmful online content, resulting in a dramatic decline in traffic to major adult websites following their implementation. Enshrined in the Online Safety Act 2023, which received Royal Assent in October 2023, these regulations mandate that commercial pornographic and other adult content websites verify that users are over 18 before granting access, employing robust and verifiable methods such as document checks, biometric verification, or third-party age assurance services. The enforcement of these requirements, effective from July 25, 2025, marks a significant shift in the UK’s approach to online safety and digital content regulation.
This legislative framework builds upon earlier efforts like the Digital Economy Act 2017, addressing prior challenges in enforcement and privacy concerns. The Online Safety Act places Ofcom, the UK’s communications regulator, at the center of overseeing compliance, with powers to impose fines, block non-compliant sites, and require transparency from online platforms. While the age verification rules aim to protect minors from exposure to inappropriate content, they have triggered a roughly 30% drop in visits to adult sites such as Pornhub, XVideos, and OnlyFans, highlighting the substantial impact on user access and the adult entertainment industry within the UK.
The introduction of these measures has sparked significant controversies and concerns, particularly regarding user privacy and data security. Critics argue that the collection of sensitive personal information—often including government-issued IDs and biometric data—raises risks of data misuse or breaches, especially since many age verification providers operate outside the UK and may be subject to foreign surveillance laws like the US Patriot Act. Additionally, there are worries about potential overreach affecting non-commercial platforms and the adequacy of privacy protections under the current legislation. The increased use of virtual private networks (VPNs) by UK users to bypass age restrictions further illustrates the challenges in enforcement and user responses to privacy concerns.
Public and industry reactions have been mixed, with some adult content providers facing uncertainty over compliance costs and revenue losses, while advocacy groups and major public interest platforms such as the Wikimedia Foundation have expressed strong objections to the legislation’s scope and privacy implications. As the UK continues to refine its regulatory approach, ongoing debates center on balancing effective protection of minors, safeguarding digital rights, and ensuring privacy and security in the evolving online environment.

Background

The United Kingdom has implemented stringent age verification measures aimed at restricting access to adult and harmful online content. These measures stem from legislative efforts, notably the Digital Economy Act 2017, which was the first law to legally mandate the provision of an Internet age verification system. This act required websites with adult content to use “robust” age verification techniques to prevent access by minors, with non-compliant sites facing fines or blocking by Internet service providers. Age verification mechanisms vary and have been adopted across multiple sectors including social media, gaming, adult entertainment, dating, retail, and vaping industries. The UK’s Online Safety Act 2023 further strengthens these regulations, introducing new criminal offences such as cyber-flashing and imposing stricter age controls on platforms hosting harmful content. The law mandates that from July 2025, UK websites hosting adult or harmful content must verify the age of users before granting access, marking a significant change in how adults and minors interact with such online material.
Despite the robust legal framework, the implementation has faced challenges and controversies. Early objections arose from jurisdictions such as Jersey, which declined to participate in enforcement due to legislative limitations and instead opted to develop separate online safety laws. Furthermore, privacy concerns have been raised regarding the data collected by age verification providers, as these tools are primarily regulated under data protection laws like the UK General Data Protection Regulation (GDPR) rather than through specific online safety legislation. Critics warn that some age verification services might collect excessive personally identifiable information, potentially leading to misuse.
The introduction of these age verification requirements has also influenced user behavior. Following the enactment of the Online Safety Act, there was a notable increase in the use of virtual private networks (VPNs) by UK users aiming to circumvent restrictions by routing traffic through countries without similar regulations. Additionally, some platforms such as Reddit and Bluesky voluntarily implemented age verification in 2025 to differentiate between adult and child users, even though the law does not explicitly require child identification.

Legislative Framework and Implementation

The legislative framework underpinning the recent measures targeting online adult content in the UK is primarily established by the Online Safety Act 2023. This Act, which received Royal Assent on 26 October 2023, represents a significant overhaul of existing online safety laws and is designed to protect both children and adults from harmful and illegal online content. The Act places a range of new legal duties on social media companies, search engines, and other online service providers, mandating them to implement robust protections against exposure to illegal content, including child sexual abuse material (CSAM), scam advertisements, and age-inappropriate material.
The Online Safety Act 2023 is the culmination of seven years of legislative development and consultation, with Ofcom—the UK’s communications regulator—tasked with enforcing the new rules. Between November 2023 and May 2025, Ofcom is conducting a phased consultation process to develop detailed rules and codes of practice to ensure compliance across the digital sector. This phased approach aims to bring the Act’s protections into effect as swiftly and comprehensively as possible.
A key feature of the Act’s scope relates to commercial pornographic websites. The initial 2021 draft bill proposed regulation only for pornographic sites offering user-to-user functionalities; sites without these features could opt out of regulation. However, during pre-legislative scrutiny, the Secretary of State for Digital, Culture, Media and Sport indicated consideration of extending regulation to all commercial pornographic websites, irrespective of interactive features. This broadening of scope is reflected in the final legislation, which also repealed parts of the Digital Economy Act 2017 relating to mandatory age verification, a previously unenforced requirement.
Technical and practical challenges to enforcement, such as the use of VPNs and DNS over HTTPS that complicate content blocking, have been acknowledged by regulators and policymakers, contributing to delays in the implementation timeline of related online safety measures in prior years. Despite these challenges, the current regulatory timeline sets December 2024 as the earliest start date for compliance duties for certain online services, with ongoing consultations and guidance to assist service providers in meeting their obligations.
Together, these legislative and regulatory measures form a comprehensive framework aimed at drastically reducing the accessibility of harmful and age-inappropriate online adult content, thereby contributing to observed declines in traffic to adult websites following the introduction of these new age restrictions.

Age Verification Requirements

The Online Safety Act 2023 mandates robust age verification measures for websites hosting adult or harmful content in the UK. Enforced from July 25, 2025, the law requires platforms to confirm that visitors are over 18 before granting access to restricted content, including adult entertainment sites such as Pornhub, xHamster, and XVideos, as well as social platforms offering mature content or direct messaging features.
The Act permits multiple verification approaches, ranging from traditional document checks—such as uploading a government-issued ID (passport or driver’s license) combined with biometric selfies—to third-party verification services like Yoti, AgeChecked, or Persona. Other accepted methods include credit card verification, bank or mobile provider checks, facial age estimation through artificial intelligence, and simple computer-based yes/no verifications without sharing personal details. For example, X plans to deploy AI-driven facial age estimation, while Telegram uses facial scans to distinguish users above or below 18 years old.
Platforms have adopted diverse strategies in response to these requirements. Major services such as Reddit, Discord, Bluesky, and Grindr have implemented age-verification checks for accessing mature content, direct messaging, or voice and video features. Some smaller websites have applied minimal checks or blocked UK users entirely, citing privacy concerns or the high costs of compliance. Notably, OnlyFans already employs facial age verification technology that estimates age without storing images, exemplifying privacy-conscious implementation.
While the Act does not explicitly require platforms to identify children but rather to verify age robustly, privacy and data protection remain critical concerns. The Information Commissioner’s Office (ICO) oversees compliance with UK data protection laws to prevent excessive data collection or misuse during verification processes. Privacy issues have been raised regarding the storage and handling of sensitive data, especially as many third-party verification providers are based outside the UK and subject to foreign data access laws such as the US Patriot Act. To mitigate risks, companies like Persona limit data retention to as little as seven days and avoid storing biometric images.
Age verification systems must balance effectiveness and user privacy, and Ofcom has emphasized the need for safe, proportionate, and secure methods to prevent underage access while safeguarding personal information. Security firms such as Aardwolf Security assist organizations in conducting penetration tests and security assessments to maintain regulatory compliance and protect sensitive user data from breaches.
Failure to comply with these requirements may result in fines or blocking of sites by UK internet service providers. Although technical challenges remain, Ofcom has affirmed that several methods are capable of delivering highly effective age verification, marking a significant step forward from earlier stalled attempts in this area.

Impact on Adult Websites

The introduction of robust age verification measures under the UK’s Online Safety Act 2023 has led to a significant decline in traffic to major adult websites. These new regulations, which came into full effect on July 25, 2025, require pornographic sites operating in the UK to implement stringent age checks to prevent access by under-18 users. Unlike the previous system where users could simply tick a box to confirm their age, the updated rules demand more secure and verifiable methods, resulting in increased friction for users attempting to access adult content.
As a direct consequence, data analytics firm Similarweb reported nearly a 50% drop in visits to Pornhub, the UK’s most visited adult site, immediately following the implementation of the new age restrictions. Pornhub saw a reduction of over 1 million visitors within two weeks of the regulation’s enforcement. Other leading sites, such as XVideos, experienced a similar decrease of 47%, while OnlyFans reported a decline exceeding 10% in the same period. These figures indicate a dramatic impact on user engagement across major platforms within the adult entertainment sector.
The enforcement of these measures aligns with the government’s intention to protect minors from exposure to harmful content. While adult websites have borne the brunt of the traffic decline, similar restrictions applied to social media platforms that host age-restricted content, such as X and Reddit, have not resulted in comparable decreases in user visits over the same timeframe. This suggests that the unique nature of adult content and the strictness of verification methods contribute significantly to the observed traffic reduction.
The overall financial impact on commercial porn providers remains uncertain, as official estimates of revenue loss, compliance costs, and potential fines have not been fully determined. Nonetheless, the introduction of these age verification protocols represents a fundamental shift in the UK’s digital landscape, reflecting a broader regulatory effort to enhance online safety and uphold a duty of care across internet services.

Privacy and Security Concerns

The implementation of age verification requirements in the UK has raised significant privacy and security concerns among users. Many citizens have expressed apprehension about uploading sensitive personal information, such as government-issued IDs or biometric data, to access restricted content. The primary worry is the potential for this data to be stolen or leaked in the event of a breach, which could have serious ramifications for individual privacy and security.
The Online Safety Act mandates age verification across a broad range of platforms—including social media, search engines, and streaming services—placing a “duty of care” on these services to protect minors. This obligation necessitates the collection of sensitive information, such as photo IDs or financial details, which inherently increases the risk of unauthorized access if the data is not properly secured. Despite these risks, concerns about personal data safety have not been thoroughly addressed in the legislation.
Age verification methods recognized under the Act include traditional document checks and newer age assurance technologies. Typically, users may be required to upload a government-issued ID, like a passport or driver’s license, often accompanied by a biometric selfie to confirm identity. While these details do not necessarily need to be stored long-term, the transmission and handling of such information still pose privacy challenges.
In response to these concerns, many adults have turned to virtual private networks (VPNs) as a means of circumventing age verification processes. VPNs allow users to mask their virtual location and bypass geographic restrictions and age checks, thereby protecting their privacy. Following the enforcement of the new age verification rules, VPNs experienced a surge in downloads in the UK, becoming the most downloaded apps on Apple’s App Store during that period. However, there is no clear evidence that this increase in VPN usage is driven by minors attempting to bypass restrictions; it is more likely that adults are using VPNs to evade the new requirements.

Regulatory Oversight and Responses

The implementation of the Online Safety Act has introduced a comprehensive regulatory framework aimed at enhancing user protection on digital platforms, particularly concerning age restrictions on adult sites. Ofcom, the independent regulator for online safety in the UK, plays a central role in enforcing the Act’s provisions. It requires companies to publish transparency reports detailing their risk management and compliance measures and mandates that companies based outside the UK appoint a UK-based legal representative accountable for adherence to the law.
Ofcom possesses extensive enforcement powers, including issuing codes of practice, investigating non-compliance, and imposing significant penalties. These penalties can reach up to 10% of a company’s qualifying worldwide revenue, with the regulator authorized to block access to non-compliant services and pursue criminal liability in severe cases. The regulator emphasizes proportionality in its approach, focusing more stringent obligations on the largest platforms with the greatest reach and risk.
Age verification systems under the Act must be implemented in ways that are safe, proportionate, and privacy-preserving. The Information Commissioner’s Office (ICO) oversees compliance with UK data protection laws in this context, ensuring that platforms minimize the personal data collected and prevent misuse or excessive data gathering through age verification mechanisms. Ofcom collaborates closely with the ICO and may refer concerns about data protection breaches to the ICO for further action.
To support compliance in an increasingly complex regulatory environment, organizations often engage specialized security firms to conduct thorough assessments, such as penetration testing, to identify and mitigate vulnerabilities in their systems. These measures help platforms protect sensitive user data and maintain adherence to both safety and privacy obligations under the Online Safety Act.
Since March 2025, platforms have been legally required to protect users from illegal content online, with Ofcom actively enforcing these duties through multiple enforcement programs designed to monitor and ensure compliance. The regulatory landscape continues to evolve with updates such as the Online Safety Act 2023 (Pre-existing Part 4B Services Assessment Start Day) Regulations 2024, which further clarify the implementation timeline and compliance requirements for services subject to the Act.

Public and Industry Reactions

The introduction of the new age verification laws in the UK has elicited a wide range of responses from both the public and various industry stakeholders. Several lobby groups connected to regulatory bodies have played an influential role in shaping online safety policies over the past decade, often driven by a belief in the economic potential of the UK’s “safety tech” sector. Despite initial setbacks, including a failure to implement the law in 2019 attributed to administrative errors and technological challenges, the regulator Ofcom has since affirmed that multiple technological methods are now capable of effective age verification.
Adult content providers have faced uncertainty regarding the financial impact of compliance, with the initial impact assessment acknowledging that costs related to revenue loss, compliance, and fines remain unclear. In response, Ofcom has committed to actively engaging with a broad spectrum of adult service operators—both large and small—to inform them of their obligations and to pursue enforcement actions against non-compliant entities. The regulator has also emphasized its readiness to impose stringent penalties, including fines of up to £18 million or 10% of annual revenue, and, in severe cases, to block sites from operating within the UK.
On the public interest front, significant opposition has arisen from advocates concerned about privacy and the potential overreach of the legislation. Campaign groups such

Broader Implications and Consequences

The enforcement of the Online Safety Act 2023, which mandates robust age verification for websites hosting adult content, has led to significant and multifaceted consequences beyond the immediate regulatory compliance. One notable impact has been a dramatic 30% drop in traffic to adult websites operating within the UK, a shift attributed to users’ reluctance or inability to navigate the new age verification requirements. This change not only affects website revenues but also influences the broader digital adult content landscape.
A major concern raised by critics involves the potential negative effects on diverse and ethical pornographic content. Many argue that the new regulations disproportionately impact content that is not tailored to the traditional male gaze or optimized for maximum clicks and ad revenue, potentially stifling more varied and socially conscious creators. The original impact assessment acknowledged uncertainties regarding the financial costs to UK commercial porn providers, including losses in revenue, increased compliance expenditures, and possible fines, emphasizing the unpredictable nature of the regulatory outcomes.
Privacy and data security have emerged as critical issues surrounding the implementation of age verification. Although the Online Safety Act demands robust verification methods, it does not explicitly impose further duties concerning the privacy or security of the data collected during the process. This gap has led to fears that some age verification providers might gather excessive personally identifiable information, which could be processed beyond the intended purpose, potentially violating regulations such as the General Data Protection Regulation (GDPR). Consequently, some platforms have either opted out of serving UK users or implemented minimal checks, while others have blocked UK IP addresses entirely to avoid compliance burdens.
The law’s impact extends beyond adult content platforms to affect broader digital freedoms and user experiences. For instance, the introduction of mandatory age verification has contributed to an increase in the use of virtual private networks (VPNs), as users seek to circumvent geographic restrictions and maintain access to unfiltered content. Furthermore, the measures have triggered unintended over-censorship; in some cases, even non-adult content has been restricted due to the automated application of filters, raising concerns about freedom of expression and the chilling effects of overbroad enforcement. This heightened surveillance and control of online activity have been criticized for infringing on individual privacy and freedom, with arguments that the pursuit of child safety online is coming at the cost of broader digital rights.

Criticisms and Controversies

The implementation of the Online Safety Act (OSA) and its associated age verification measures has sparked significant debate and criticism from various stakeholders. Nigel Farage of the Reform Party voiced concerns about the impact of the legislation on freedom of expression online, though Technology Secretary Peter Kyle rebuked Farage for equating opponents of the Act with “people like Jimmy Saville,” highlighting the polarized nature of the discussion.
Public interest platforms such as and the Wikimedia Foundation have strongly objected to the Act, arguing that it risks undermining non-profit, community-governed websites. Rebecca MacKinnon of the Wikimedia Foundation described the legislation as “harsh” and criticized its failure to differentiate between commercial technology giants and public knowledge projects. Both the Wikimedia Foundation and Wikimedia UK have rejected proposals to implement age verification or identity checks on their platforms, citing concerns over data minimisation, privacy, and editorial independence. In June 2023, they publicly urged lawmakers to exempt public interest platforms from the scope of the Act.
Age verification systems mandated by the Act have also faced scrutiny regarding privacy and data security. While the government and regulator Ofcom emphasize the need for safe, proportionate, and secure methods compliant with UK data protection laws, critics argue the Act’s requirements are insufficient. The Act mandates that age verification techniques must be robust but does not impose additional privacy or security obligations, leaving open the possibility of inadequate data safeguards. Platforms failing to comply risk fines or being blocked within the UK.
Concerns have been raised about the role of third-party age verification companies, many of which are US-based and thus potentially subject to the US Patriot Act, which could compel disclosure of UK user data to US authorities. To mitigate this, some companies like Persona have pledged not to retain ID verification data for longer than seven days. Nevertheless, many UK citizens remain apprehensive about submitting sensitive personal information—such as government-issued IDs or biometric data—due to fears of data breaches and misuse. Andy Lulham of Verifymy noted that while systems are designed to be robust, it remains possible for adults to complete age checks on behalf of children if devices are shared, highlighting limitations in enforcement.
The Act’s approach to detecting and preventing abuse also raises privacy concerns. Methods to detect abuse might involve surveillance techniques such as tracking IP addresses or collecting device information, which pose challenges related to fairness and user privacy.

Future Developments and Outlook

The enforcement of the Online Safety Act 2023 marks a significant shift in the UK’s approach to regulating online adult content, particularly with the introduction of mandatory age verification measures for commercial pornographic websites. While these measures aim to protect minors by restricting access to adult content, they have also raised substantial privacy and security concerns. Users are required to submit sensitive personal information, such as photo IDs, to verify their age, which has sparked widespread apprehension about data protection and the potential misuse of personal data.
Looking ahead, the regulatory landscape surrounding online age verification is expected to evolve in response to these concerns. The UK government and regulatory bodies like Ofcom are likely to continue refining the guidelines to balance effective safeguarding with privacy rights. Public consultations remain an integral part of this process, allowing stakeholders to provide feedback on the implementation and impact of these rules. Additionally, there is growing demand for safer and more privacy-conscious verification technologies, which may drive innovation in this sector.
Moreover, organizations operating within this space will need to enhance their security measures to comply with the increasingly stringent regulations and to maintain user trust. Specialist security firms offering penetration testing and vulnerability assessments will play a crucial role in helping businesses safeguard sensitive data and ensure compliance with data protection laws such as the UK General Data Protection Regulation (UK GDPR).
Despite ongoing challenges, the UK’s approach signals a commitment to tackling the accessibility of adult content to minors while prompting wider debates about privacy, digital safety, and regulatory effectiveness. Future amendments to the Online Safety Act or complementary legislation could further expand or modify the scope and enforcement mechanisms, reflecting the dynamic nature of online safety governance.

The content is provided by Jordan Fields, 11 Minute Read