Britain Played the "Think of the Children" Card to Build a Digital Checkpoint. A VPN Became the #1 App.

For as long as pornography has existed online, proving you were old enough to see it meant clicking a button that said so. On 25 July 2025, the UK’s Online Safety Act ended that arrangement for good, requiring real age checks—ID uploads, facial scans, credit-card verification—from adult sites and a fast-growing list of other platforms.

It was, naturally, pitched as a righteous crusade to protect the youth. But in practice, it was a massive, state-mandated identity dragnet. And the public reacted exactly as you’d expect when asked to present their papers at the digital border: within minutes, sign-ups for Proton VPN in Britain rose 1,400 percent. By the end of the week, it was the single most downloaded free app in the UK App Store, ahead of ChatGPT.

The Oldest Political Cheat Code in the Book

If a government wants to eradicate online anonymity, normalize digital ID checkpoints, and convert the free web into a heavily monitored panopticon, they can’t just say that. People would riot. But if you wrap that exact same surveillance infrastructure in a trench coat and call it "child safety," you have a golden ticket. Anyone who points out that handing your passport over to a random porn site is a massive privacy violation is immediately branded a defender of digital deviancy.

It is the ultimate legislative Trojan horse: use the undeniable necessity of protecting kids to quietly strip away the freedoms of adults. And it worked beautifully.

Sixty-Nine Million Checks, and a Baroness With an Inconvenient Number

Ofcom’s first statutory report on the law, published a year in, shows the checks happened at real scale: 69 million age verifications across 32 regulated services in the back half of 2025, a 23-fold jump from the six months before. The share of children running into an effective age check rose from a quarter to 43 percent.

By the regulator's own account, the law deterred pornography access without doing much yet for the rest of what it was meant to stop. But Baroness Beeban Kidron—one of the Act's own architects—has cited guidance putting child VPN use at roughly one in ten. This means that of everyone using a VPN in Britain, only about 10 percent are minors. The other nine in ten downloading a VPN in the weeks after 25 July were just adults who didn't want to hand a government-approved data broker a biometric scan just to browse the web in peace.

The Government Finds the Loophole and Leaves It Exactly Where It Is

None of this is a secret. Technology Secretary Liz Kendall confirmed in July 2026 that the government has no plan to age-gate or ban VPNs, citing their "legitimate privacy and security uses," and asked Ofcom to come back with guidance on detecting VPN use by October.

Translated: the workaround the tech-savvy minors are already using stays open, on purpose. Why? Because the government doesn't actually care about the loophole, as long as the compliance burden—the ID uploads, the facial scans, the "prove who you are to exist online" mandate—keeps landing squarely on the 90 percent of normal adults who were never the problem in the first place. The goal isn't an airtight seal; the goal is establishing the precedent of mass surveillance.

Discord Takes the Surveillance State Global

Once a government normalizes a shiny new checkpoint, tech companies are all too eager to automate it. In February 2026, Discord announced it would extend the same logic to all 200-plus million of its users, everywhere, not just Britain: every account defaults to "teen mode"—no age-restricted servers, no unblurred sensitive content, no full DM controls—until you hand over a government ID or sit for a live facial scan.

The verification vendor behind it, k-ID, was already familiar to a certain kind of user: months earlier, kids playing the VR game Gorilla Tag, which uses the same service, had discovered they could beat its facial check with a photo of Donald Trump, or of G-Man from Half-Life. Within roughly a day of Discord's announcement, a free browser tool appeared on GitHub letting anyone fail the same check on purpose—a gamepad-controlled, fully rigged 3D avatar standing in for your actual face, built, per its own pitch, to run on "any potato computer."

Filed Under: The Panopticon Nobody Asked For

Every one of these systems was sold to the public as a high-tech shield to stop minors from bypassing a button that used to just ask them to lie once. Yet none of the fixes has actually stopped that group—it took about a day to find the workaround each time, and the workaround is free.

What the fixes reliably do is exactly what they were always designed to do: convert an ordinary website visit into a highly trackable data-collection event for everyone else. The adult who doesn't want an offshore holding company keeping a scan of their driver's license. The Discord user who'd rather not hand a stranger's verification vendor a selfie just to keep using DMs the way they worked last year. The honor system got replaced with a surveillance checkpoint. And the people the checkpoint was supposedly built for are already back inside, wearing someone else’s face, while the rest of us are left standing outside, holding our papers, right where the government wanted us all along.

Filed from public reporting:

• ipregistry — One Year of UK Age Verification
• Malwarebytes — VPN use rises following Online Safety Act's age verification controls
• TechCrunch — Discord to roll out age verification next month
• 404 Media — Free tool says it can bypass Discord's age verification check with a 3D model
• "The Online Safety Act Has Nothing to Do With Child Safety and Everything to Do With Censorship" (Novara Media
• Age Verification: What countries require you to perform ID checks & for what websites and platforms?
• Age verification: How laws, platforms, and devices are changing
• Age Verification in the Web - Holy Grail to Control Access to Restricted Content