Microsoft Surrenders to UK Age Verification Demands

Microsoft says it will implement age verification on its XBox console and enforce it in early 2026 to appease UK politicians.

Over the course of this month, platforms and corporations have been falling over each other to throw UK users under the bus to appease technologically incompetent politicians in the UK. Examples include Reddit and Bluesky.

Overall, the idea seems to be that if they implement age verification and appease UK regulators, then all will be good. Just throw up an age gate provided by a third party and they can dust their hands of this whole affair. The problem is that this is not really going to work out all that well, depending on how this law is enforced of course.

A major problem with all of this is the fact that the law states that the services must implement an age verification system that is “highly effective”. This is in reference to Section 81, part 5:

(1)This section sets out the duties which apply in relation to internet services within section 80(2).

(2)A duty to ensure, by the use of age verification or age estimation (or both), that children are not normally able to encounter content that is regulated provider pornographic content in relation to the service.

(3)The age verification or age estimation must be of such a kind, and used in such a way, that it is highly effective at correctly determining whether or not a particular user is a child.

Failure to comply can open up these corporations and platforms to penalties. The problem? There’s no such thing as a “highly effective” age verification system. Either the system being implemented overblocks users, is a security nightmare, doesn’t do a good job at identifying people as children, or a combination of those flaws. Take your pick because the law is literally asking for the impossible.

For web services, the age verification system being implemented is easily circumvented. Over the last few days, these systems are easily circumvented with VPNs and video game characters. If those holes can be found within days of the systems being implemented, it stands to reason more will be found further down the road. In short, the age verification systems being implemented have more holes than Swiss cheese. As a result, it’s probably only a matter of time before the services get handed penalties for implementing systems that are no doubt going to be seen as “bad” by UK politicians.

This, of course, isn’t the fault of the corporations and platforms. The law being followed is literally asking for the technologically impossible. Even attempting this is little more than an effort to run a fools errand. Sooner or later, the busy bodies demanding everyone comply with their own personal set of morals are going to demand more and that simply isn’t going to happen.

Yet, that isn’t stopping Microsoft from bending the knee to UK politicians. Reports are indicating that Microsoft is rolling out age verification for UK residents on its XBox console with enforcement starting in 2026. From IGN:

Microsoft has begun asking Xbox users in the UK to verify their age in order to continue accessing the platform’s full range of social features.

The move is in response to the UK’s sweeping Online Safety Act, though Microsoft has said it anticipates making similar changes in other countries in future.

Currently, the age verification requests are limited to accounts already flagged as belonging to owners aged 18 and over within the UK — and for now, the process is optional. But this will change in “early 2026”, Microsoft says, when accounts that have not been verified will lose access to Looking for Group functions and custom clubs, and be limited to voice and text communication, party functionality and game invites, plus “user-generated content” (including the Activity Feed) just amongst Xbox friends. Integration with Discord will be disabled, as will the ability to broadcast to Twitch.

“Age verification is a new feature being introduced for players logging into an Xbox experience with Microsoft accounts based in the UK,” the company wrote in a just-published Q&A. “It helps ensure that we can continue to provide players on our platform with age-appropriate experiences and keep the Xbox community safe.

The service being used is known as Yoti to carry this out. Chances are, it’s only a matter of time before holes not already found in the system are found and exploited.

It’s not a matter of “if” but “when” these decisions blow up in the faces of both politicians and the spineless organizations that thought they could just hire a third party and forget all about it. Whether that comes in the form of a hack or compliance issues, it’s simply not going to end well. The only thing these organizations and corporations are accomplishing is signalling to the rest of the world that this sort of demand on the part of government is normal and it’s acceptable that other governments start making similar impossible demands. This means other people are going to suffer from the consequences of pushing these stupid laws. What an awful timeline we live in.

Drew Wilson on Mastodon, Twitter and Facebook.