Australia's age verification codes came into effect on March 9, 2026, requiring proof of age to access pornography, R18+ games, adult apps, and explicit AI chatbots. The intention is sound: protecting minors from adult material. The execution has proven messier. Pornhub, RedTube and YouPorn blocked Australian users the same day rather than collect government IDs. Other platforms have implemented age gates. And across the country, three of the 15 most downloaded free apps on the Australian App Store on March 9 were VPN services.
The timing reveals the tension at the heart of the regulation. Rather than implement any of those checks, Pornhub's parent company Aylo chose to block Australian users entirely. The company's statement framed this as a principled stand: "Australia is following a similar approach to the UK, which all our evidence shows does not effectively protect minors, and instead creates harms relating to data privacy and exposure to illegal content on non-compliant platforms." That echoes a broader critique from the adult industry that age verification shifts the problem rather than solving it.
Sex workers and adult content creators see a more immediate threat: diminished income. Modern verification technologies will provide needless hoops for potential clientele to jump through, leading to a loss of work and income, with potential customers deterred from paying for content. Sex worker advocacy group Scarlet Alliance has warned that the requirement risks a "chilling effect" on platforms willing to host online advertising, potentially over-filtering content, including sexual health information.
To verify age, these third-party systems need a photo of a driver's licence or passport, or a biometric facial scan. That data is stored by a private company, for the purpose of proving someone wanted to watch pornography. A digital wellbeing researcher at Western Sydney University noted that mandating government ID or face scans not only on social media platforms but also on extreme adult content sites creates a worrying situation for privacy and safety, particularly when such data is spread across sensitive providers.
The same pattern played out in the UK when similar rules took effect in July 2025. A VPN works by routing a connection through a server in another country, so when users connect to a server in New Zealand or the US, Pornhub sees a non-Australian IP address and doesn't apply the Australian age gate.
The regulatory intent remains legitimate. Research by eSafety found that one in three Australians aged 16 to 18 were under age 13 when they were first exposed to pornography. But the mechanics of enforcement now face real-world constraints. Age verification systems exist on a spectrum of effectiveness. Some are fallible. Age verification technologies have proven unreliable and have been known to be less accurate when used on the faces of women, non-binary people, and people of colour. And as sites block users or implement gates, the question persists: are users being kept safe, or simply redirected toward less regulated spaces?
The codes carry penalties of up to A$49.5 million per breach. For most platforms operating in Australia, compliance is now mandatory. But the Pornhub blockade and the VPN surge suggest that the law's effectiveness may hinge on factors the regulators didn't fully control: user behaviour, industry economics, and the simple fact that determined users have low-cost alternatives.