New UK laws requiring adult websites to deploy “highly effective” age verification tools were circumvented within hours of going into effect, according to a Sky News investigation that revealed how easily the systems can be bypassed using common software.
Ethical hackers Chris Kubecka and Paula Popovici demonstrated for Sky News how they were able to access multiple pornographic sites without submitting any form of age verification, highlighting significant flaws in the current implementation of online safety measures intended to block under-18s.
Using publicly available tools and software running on standard consumer devices, the pair showed how simple it was to bypass the age checks, a process that reportedly took one viewer “less than 30 seconds.”
“This shows the systems will not be effective at stopping under-18s from accessing explicit content online,” said Ms. Kubecka.
The demonstration comes just hours after new regulations, part of the UK’s broader Online Safety Act, came into force. Under the law, platforms hosting adult content are required to implement stringent age checks, such as government ID scans, bank account verification, or AI-powered facial age estimation tools.
Despite these mandates, Sky News confirmed that several adult websites had not enabled any age verification mechanisms as of Friday morning, despite previously stating they would comply.
In response, Ofcom, the UK’s digital regulator, now tasked with enforcing the Online Safety Act, stated that it is actively monitoring compliance and will take enforcement actions against violators.
“The new rules have only been in place for a matter of hours,” an Ofcom spokesperson said. “We will be assessing compliance to ensure platforms have age checks in place and that they are highly effective. Companies that fall short can expect enforcement action.”
The Department for Science, Innovation and Technology echoed this stance, emphasizing that “tough fines” await platforms that fail to meet their legal obligations.
While authorities have emphasized the importance of compliance, data indicate that users, including both minors and adults, are actively seeking ways to circumvent the new rules. Google Trends indicates a surge in searches for tools to bypass age verification. Additionally, advertising data reviewed by Sky News revealed that companies were targeting UK users with tools designed to circumvent restrictions, even in the lead-up to enforcement.
Ofcom has warned that platforms must block content that promotes or facilitates workarounds, especially when targeting younger users.
Another worrying trend emerged within hours of the rules taking effect: internet activity on the dark web spiked by an estimated 66,000 users in the UK, raising fears that users, including minors, may turn to riskier online spaces to access adult content.
“I don’t want illegal or extreme content being normalized in our teens,” Ms. Kubecka warned.
While regulators emphasize enforcement, critics highlight broader societal issues. Some observers argue that technical restrictions can only go so far without parental responsibility.
“Age verification wouldn’t be necessary if parents would do the bare minimum to actually parent their child and use the parental features built into all devices,” one viewer wrote to Sky News.
Still, with legal and regulatory pressure mounting across the UK and Europe, adult platforms are under unprecedented scrutiny. Yet as this latest investigation shows, the tools in place, however well-intentioned, may not be as effective or secure as lawmakers and regulators hope.
Ofcom has promised to continue its oversight and provide periodic updates as enforcement actions progress. In the meantime, ethical hackers and internet safety experts alike warn that the current system may do little to keep minors away from explicit material and may, in some cases, drive them toward even more dangerous corners of the web.