iOS 26.4 age verification without credit card or plastic ID

TCHDMF wrote:

The UK government via OFCOM has not stated a specific list of methods that must be used for age verification. The have provided a non-exhaustive list that includes comparing photo IDs to Live Photos as well as using Credit Card checks. It also includes age estimates from Live Photos, mobile carrier checks (cell number), and direct banking checks, among others. It also identifies methods that are not acceptable, such as self-verification (check boxes). This information is available on OFCOM’s website.

No one here is privy to Apple's decision-making process. And, even more pointedly, no one here can make Apple change anything. You can let Apple know any thoughts you may have on the matter here:

Product Feedback - Apple

I would suspect that Apple would be in a whole raft of trouble if whatever method they picked to verify age failed and still let children access naughty websites. They probably want to avoid that. The fines are quite large.

The Facial Age Estimation, one of the options, appears to be done by a third party. Frankly, that sounds like a privacy disaster just waiting to happen.

The UK government via OFCOM has not stated a specific list of methods that must be used for age verification. The have provided a non-exhaustive list that includes comparing photo IDs to Live Photos as well as using Credit Card checks. It also includes age estimates from Live Photos, mobile carrier checks (cell number), and direct banking checks, among others. It also identifies methods that are not acceptable, such as self-verification (check boxes). This information is available on OFCOM’s website.

IdrisSeabright wrote:

TCHDMF wrote:

The UK government via OFCOM has not stated a specific list of methods that must be used for age verification. The have provided a non-exhaustive list that includes comparing photo IDs to Live Photos as well as using Credit Card checks. It also includes age estimates from Live Photos, mobile carrier checks (cell number), and direct banking checks, among others. It also identifies methods that are not acceptable, such as self-verification (check boxes). This information is available on OFCOM’s website.

No one here is privy to Apple's decision-making process. And, even more pointedly, no one here can make Apple change anything. You can let Apple know any thoughts you may have on the matter here:

Product Feedback - Apple

I would suspect that Apple would be in a whole raft of trouble if whatever method they picked to verify age failed and still let children access naughty websites. They probably want to avoid that. The fines are quite large.

The Facial Age Estimation, one of the options, appears to be done by a third party. Frankly, that sounds like a privacy disaster just waiting to happen.

Indeed. I'm fairly certain apple chose Credit Card and Driving License as the 2 most Privacy compliant options. Rather than hand over personally identifiable data to a third party for verification without any way of guaranteeing the use and protection of said data.

Microsoft being less concerned about user's privacy chose the path of least resistance and offloads the verification to other parties.

The addition of the Apple Account's creation date as a means of age verification also implies Apple had to at least consider other options and involve the UK government in that decision. I doubt they could unilaterally use the account creation date without getting some kind of approval for it from the UK government.

Also, officials passing this law undoubtedly did not stop to consider how this verification was going to happen when they were drafting it which is why there is no hard list, and just some available options without any concern for personal data usage and privacy.

TCHDMF wrote:

Phil0124 wrote:

IdrisSeabright wrote:

TCHDMF wrote:

The UK government via OFCOM has not stated a specific list of methods that must be used for age verification. The have provided a non-exhaustive list that includes comparing photo IDs to Live Photos as well as using Credit Card checks. It also includes age estimates from Live Photos, mobile carrier checks (cell number), and direct banking checks, among others. It also identifies methods that are not acceptable, such as self-verification (check boxes). This information is available on OFCOM’s website.

No one here is privy to Apple's decision-making process. And, even more pointedly, no one here can make Apple change anything. You can let Apple know any thoughts you may have on the matter here:

Product Feedback - Apple

I would suspect that Apple would be in a whole raft of trouble if whatever method they picked to verify age failed and still let children access naughty websites. They probably want to avoid that. The fines are quite large.

The Facial Age Estimation, one of the options, appears to be done by a third party. Frankly, that sounds like a privacy disaster just waiting to happen.

Indeed. I'm fairly certain apple chose Credit Card and Driving License as the 2 most Privacy compliant options. Rather than hand over personally identifiable data to a third party for verification without any way of guaranteeing the use and protection of said data.

Microsoft being less concerned about user's privacy chose the path of least resistance and offloads the verification to other parties.

The addition of the Apple Account's creation date as a means of age verification also implies Apple had to at least consider other options and involve the UK government in that decision. I doubt they could unilaterally use the account creation date without getting some kind of approval for it from the UK government.

Also, officials passing this law undoubtedly did not stop to consider how this verification was going to happen when they were drafting it which is why there is no hard list, and just some available options without any concern for personal data usage and privacy.

I agree that Apple is concerned about being compliant with laws and regulations, or rather I would hope they are concerned with that. However, maybe I am missing something, but given that the age verification is being done on an iPhone which very likely has a mobile number associated with it, I would think the query of the mobile provider regarding the mobile number would be among the easiest options.

Just how would a mobile number help verify someone's age? Say I'm a parent and I want a new phone and number and I give my 13 year old my phone and let them keep the number? Verifying age by a phone number simply wouldn't be nearly enough.

Also Apple might want to review the OFCOM document "Guidance on highly effective age assurance for Part 3 Services" - particularly the section "Additional principles for providers to consider."

From the 24 April 2025 version:

Section 4.60: "Alongside fulfilling the criteria, the age assurance process should be easy to use and work for all users. Failing to do so might unduly prevent adult users from accessing legal content."

Section 4.64: "Age assurance processes that are inaccessible either because they are complex, are less accurate for users with different characteristics, to include requirements that certain groups of users are unable to fulfill, may result in users being unable to access a service that they should otherwise be able to use."

There are other places in the document that also address the issue that the original poster references, the lack of having any of the documents that Apple chose to accept for age verification.

So it's pretty clear that the original poster's issue is not a "UK Government" or OFCOM issue but is in fact a design problem on behalf of Apple. Hopefully Apple corrects this soon.

Phil0124 wrote:

IdrisSeabright wrote:

TCHDMF wrote:

The UK government via OFCOM has not stated a specific list of methods that must be used for age verification. The have provided a non-exhaustive list that includes comparing photo IDs to Live Photos as well as using Credit Card checks. It also includes age estimates from Live Photos, mobile carrier checks (cell number), and direct banking checks, among others. It also identifies methods that are not acceptable, such as self-verification (check boxes). This information is available on OFCOM’s website.

No one here is privy to Apple's decision-making process. And, even more pointedly, no one here can make Apple change anything. You can let Apple know any thoughts you may have on the matter here:

Product Feedback - Apple

I would suspect that Apple would be in a whole raft of trouble if whatever method they picked to verify age failed and still let children access naughty websites. They probably want to avoid that. The fines are quite large.

The Facial Age Estimation, one of the options, appears to be done by a third party. Frankly, that sounds like a privacy disaster just waiting to happen.

Indeed. I'm fairly certain apple chose Credit Card and Driving License as the 2 most Privacy compliant options. Rather than hand over personally identifiable data to a third party for verification without any way of guaranteeing the use and protection of said data.

Microsoft being less concerned about user's privacy chose the path of least resistance and offloads the verification to other parties.

The addition of the Apple Account's creation date as a means of age verification also implies Apple had to at least consider other options and involve the UK government in that decision. I doubt they could unilaterally use the account creation date without getting some kind of approval for it from the UK government.

Also, officials passing this law undoubtedly did not stop to consider how this verification was going to happen when they were drafting it which is why there is no hard list, and just some available options without any concern for personal data usage and privacy.

I agree that Apple is concerned about being compliant with laws and regulations, or rather I would hope they are concerned with that. However, maybe I am missing something, but given that the age verification is being done on an iPhone which very likely has a mobile number associated with it, I would think the query of the mobile provider regarding the mobile number would be among the easiest options.

TCHDMF wrote:

Also Apple might want to review the OFCOM document "Guidance on highly effective age assurance for Part 3 Services" - particularly the section "Additional principles for providers to consider."

From the 24 April 2025 version:

Section 4.60: "Alongside fulfilling the criteria, the age assurance process should be easy to use and work for all users. Failing to do so might unduly prevent adult users from accessing legal content."

Section 4.64: "Age assurance processes that are inaccessible either because they are complex, are less accurate for users with different characteristics, to include requirements that certain groups of users are unable to fulfill, may result in users being unable to access a service that they should otherwise be able to use."

There are other places in the document that also address the issue that the original poster references, the lack of having any of the documents that Apple chose to accept for age verification.

So it's pretty clear that the original poster's issue is not a "UK Government" or OFCOM issue but is in fact a design problem on behalf of Apple. Hopefully Apple corrects this soon.

Sigh.......this thread is going off the rails. Why are you telling other users on this user to user only forum, which Apple neither participates, nor reads for user feedback, what Apple needs to do at all? Apple isn't here. Apple isn't going to see what you think they should do.

If you think Apple should be doing something, you can tell them, but I'm quite sure their legal department has gone over this with a fine tooth comb and they know what they're doing. You can use this link to tell Apple what you think they should be doing --> Product Feedback - Apple

Again. No one posting here has anything to do with Apple, the UK Government, regulations or laws. We are all users here, just like you. We have no control over anything the UK Government nor Apple does about anything.

Why do you think they are lazy?

Verification requirements are set by the UK government. It's not like Apple can simply choose to allow other methods of verification if the government only permits those 2 options for this process.

Contact your government representatives and tell them here should be more options to verify age.

Apple can't add more options if there UK government does not accept them.

TCHDMF wrote:

Here is an idea. How about the Government provide a framework for age verification where they are responsible for verifying the information. That is how it works in the US with Passport and Digital ID, where it is the Government that provides the verification and Apple does not have to compromise their users personal and private information. This is all the data that needs to be provided:

• Images of the front and back of your ID 
• Your Live Photo or selfie
• Results of the analysis of the Live Photo or video of your head and facial movements, but not the video itself
• Data read from the PDF417 barcode on your ID
• A single-digit value, used to help prevent fraud, that’s based on your device use patterns, settings data, and information about your Apple Account

Aside from the data listed above, no other data from your device and no personal information about your Apple Account is shared with the issuing authority.

You are right it should be easy and it is with the Driver's License or Credit Card. It is the OFCOM regulations that says a Debit Card should NOT be used. Somehow for Apple to use a Facial recognition system, they would need to prove that the photo is actually that of the user of the device, so how would they do that? Even with Face ID, Apple has no access to that data for any comparison and it is stored only on your device in the Secure Enclave where no one else has access to the underlying data either.

The Mobile Network information may be useful for the owner of the Phone Number, but does not prove the device user is an adult or not. Of course these ambiguities work out well for the Government. They are not responsible for any verification and if a company has not successfully verified if a user is an adult then they will be sued. That could be worth billions to them.

So, who do you think is REALLY restricting your access?

You should contact Apple Support. Another option, is there an Apple Store close to you that you can visit?

My age was verified automatically by the length of time I've had my Apple ID.

ScrapyardGuitar wrote:

Apple support was my first port of call, they were unable to provide a solution other than to provide a list of documents that I don’t have.

Bottom line? If you cannot or are unwilling to provide the documents required by U.K. law then you are out of luck and will be restricted from using certain services. And as more governments require age verification in an attempt to protect minors from dangerous content the requirements will only get more stringent.

I’m 76 and I still have to provide proof of age to buy alcohol in the U.S.

Living life as an ‘off the grid’ outlier can be difficult at times.

Phil0124 wrote:

The addition of the Apple Account's creation date as a means of age verification also implies Apple had to at least consider other options and involve the UK government in that decision. I doubt they could unilaterally use the account creation date without getting some kind of approval for it from the UK government.

Also, officials passing this law undoubtedly did not stop to consider how this verification was going to happen when they were drafting it which is why there is no hard list, and just some available options without any concern for personal data usage and privacy.

That's not how UK law works; the law defines the "what", not the "how". The law is that online services have to make sure that uner-18s cannot see age-inappropriate content. But the government is not prescriptive about how this is done, nor can they be because the UK has common law and it is up to the courts to make case law about methods. It would be no defence to say "we had a meeting with the government and they said it was OK". Apple's lawyers clearly think that having an Apple ID for more than 18 years is meets the intent of the law and the man on the Clapham omnibus would probably agree, but the only way they can ever be absolutely sure is for a case to go before judge and jury to set case law.

Apple has no idea what your Face looks like when using Face ID. Those details are stored on your phone only and your phone gives the match, not by Apple comparing anything that is stored on their servers.

Here is an idea, how about putting the responsibility on the Government to verify your information since they enacted the law and have them send Apple the confirmation that you are an adult. That way Apple does not have to keep users personal information on their servers and can limit the information provided to the Government. You are correct, the Government knows much more about you than Apple and that makes them in a better position to provide that verification.

ScrapyardGuitar wrote:

Perhaps apple are able to provide a point of contact within the appropriate government department as they have had contact regarding setting this up.

Why do you think it's Apple's job to tell you who to contact in your government? All Apple has done is implement what your government mandated. I get this is frustrating, but you're laying blame on the wrong entity.

Maybe visit your Motor Vehicle Department and find out what you'd need to do to get a drivers license, which satisfies the requirement?

You are blaming the wrong organization.

It is the U.K. government that has implemented new precautions. If you don't like them......contact your government and ask them to retract the new laws.

Start here: https://www.ncsc.gov.uk/

Meanwhile, Apple will abide by the laws in your country.