Staff Reports
The new Internet Matters report on the Online Safety Act delivers the kind of news every grown-up who remembers being a kid already suspected: children are beating the tech meant to keep them out of adult corners of the internet. The headline anecdote — kids drawing moustaches and beards to trick facial-age checks — is funny until you remember the cost: privacy trade-offs, wasted regulator breath, and tech firms scrambling to patch a system that kids can defeat with an eyebrow pencil.
Kids, moustaches, and the limits of age verification
The Internet Matters study surveyed 1,270 UK children and found 32% had bypassed an age check in the past two months. Nearly half of kids said age checks are easy to get around, and more than a quarter of parents admitted to helping or permitting bypasses. Those numbers tell the whole story: young people are inventive, and simple fixes like “enter your birth date” or click-a-box are worthless. The moustache trick — a 12-year-old using an eyebrow pencil and being verified as 15 — is a clever headline and a savage little test of the facial-recognition tools regulators asked for.
Regulators want “highly effective” checks. Tech delivers messy trade-offs.
Ofcom and the ICO have been clear: they want stronger age assurance under the Online Safety Act, and platforms have felt the pressure. Dame Melanie Dawes at Ofcom warned tech firms to put children’s safety first, and Paul Arnold at the ICO has pushed platforms to move beyond self-declaration. So platforms are rolling out AI-based age-detection tools. But these systems bring a choice: either collect more biometric and ID data and risk privacy harms, or accept that automated checks will be brittle and easy to spoof. Neither option is particularly appealing, and parents shouldn’t be expected to cheer for both Big Tech surveillance and regulatory theater.
Don’t let technology outsource parenting — and don’t let regulators pretend it’s all solved
Here’s the blunt point: tech can help, but it can’t parent. The Internet Matters report even finds many families see better safety tools in places, yet parents still bear the burden and sometimes help kids cheat. That’s not a failure of willpower; it’s a reality of family life. Regulators should focus on workable, enforceable steps for platforms that minimize privacy damage — and stop acting as if a splashy AI box-ticking exercise frees moms and dads from paying attention. If a kid can fool an age check with fake facial hair, the tech isn’t stronger than the parent, it’s just louder.
Practical steps: what parents and regulators should actually do
Parents: use parental controls, watch what your kids stream, and talk to them frankly about online risks. Regulators: keep pushing platforms but demand solutions that respect privacy and are actually effective in real life, not just on a compliance checklist. Platforms: show your work — prove your tools work across real-world tricks without hoovering up biometric data into permanent corporate databases. The Internet Matters report is a wake-up call, not an excuse for more intrusive surveillance or a shrug from policymakers. If we want kids safer online, we need common sense, honest tech limits, and engaged parents — in that order.
