Ofcom has opened an investigation into Pornhub’s (Aylo) use of Apple-based age checks to determine whether they meet the UK Online Safety Act’s age assurance requirements.

If Ofcom finds a contravention, penalties can include fines up to £18 million or 10% of worldwide revenue, mandatory remediation, or court orders to block access via third parties; senior managers could face liability for information requests.

Preliminary findings suggest Aylo may not have completed sufficient due diligence and testing before rolling out its new age verification method, with concerns the system could still be accessible to children.

Ofcom noted progress in age-check implementation across platforms, reporting a rise in the share of children facing effective age checks from 25% to 43% between mid-2025 and early 2026, while warning that more work is needed ahead of tighter under-16 social media rules.

Supporters of device-level age verification argue it reduces privacy risks by minimizing repeated data submissions, though critics warn no system is foolproof and that VPNs or noncompliant sites can bypass checks.

Beeban Kidron welcomed the investigation, calling for privacy-preserving, highly effective age checks and sector-wide action.

The inquiry fits broader UK efforts to strengthen online safety, including forthcoming policies targeting under-16s on social media and wider age verification improvements.

UK traffic to Pornhub fell sharply after the Online Safety Act provisions took effect, with reports of a 47% drop and later up to 77% by late 2025, prompting access changes.

Ofcom Enforcement Director George Lusty underscored the importance of effective online age checks to shield minors from inappropriate material.

Pornhub had previously updated its approach, including May adjustments allowing some UK Apple users to access the site after age confirmation via the latest iOS, and shifting policies since February to block new UK users while allowing existing age-verified users to remain.

The debate continues over privacy and safety, with calls for device-level verification across platforms and ongoing UK concerns about age-check effectiveness, VPN use, and noncompliant sites.

A February 2026 UK fine against another entity for lack of age verification underscores the enforcement context surrounding the Online Safety Act.