Kids bypass online age verification with fake mustaches

Half of the surveyed children said online age checks are easy to bypass, and one of the workarounds was as low-tech as a drawn-on moustache.

That finding comes from a survey by Internet Matters, a UK-based nonprofit, of 1,000 children about the new wave of age-verification systems rolling out on adult sites and across major platforms, according to TechCrunch. The same report describes other methods children said they had used or seen others use, including pointing a webcam at an adult-looking video game character or pulling exaggerated faces to confuse automated tools.

Age checks are spreading because legislators are demanding them. TechCrunch notes that roughly half of US states now have some form of age-checking law, while the UK has its own rules that have influenced efforts elsewhere. The practical result is a growing requirement for adults to prove their age before accessing certain sites, often by uploading a passport or driver’s licence to a third-party provider. Platforms are also building their own gates: TechCrunch points to Reddit and Meta requiring government ID uploads in some contexts, and to Apple shipping software updates aimed at meeting compliance demands.

The policy promise is simple—keep minors out—but the implementation creates two parallel markets. One is the compliance market, where vendors sell identity checks, facial analysis, and “age estimation” as a service to websites that would rather outsource liability than build a sensitive system themselves. The other is the evasion market, where users trade tips that exploit the limits of webcam-based verification and the pressure companies face to keep sign-up friction low. If a check is strict enough to stop a determined teenager with makeup and a smartphone, it is also strict enough to block legitimate adults, increase customer support costs, and push traffic to less regulated corners of the internet.

The data-handling problem sits underneath both markets. Proof-of-age systems tend to concentrate identity documents and biometric signals in databases that become valuable targets, and critics cited by TechCrunch warn that the same infrastructure risks creating leak-prone repositories while changing how anonymous browsing works online. Discord’s reported delay of age verification after user backlash illustrates the trade-off: platforms can comply fast and absorb the trust hit, or move slowly and absorb regulatory risk.

In the Internet Matters survey, the most memorable bypass was a fake moustache drawn with a makeup pencil.

That detail captures what the current rollout often measures: not whether someone is an adult, but whether they can look like one to a camera for a few seconds.