From 9 March 2026, six new age‑verification codes came into force in Australia. Access to porn sites, R18+‑rated games, adult apps, and generative AI services capable of producing explicit content is now available only after age is verified. The rules apply to any online platforms accessible to people in Australia, and the maximum penalty per breach is A$49.5 million (about $34.5 million).
The codes were developed by industry associations and registered by the eSafety Commissioner, Julie Inman Grant, under the Online Safety Act 2021. The first wave of restrictions for search engines, hosting providers, and internet operators took effect back on 27 December 2025, and since then search engines have already been blurring pornographic and violent results for logged‑out users and people under 18.
Who the new rules apply to
The requirements apply to services available in Australia, regardless of where the company is registered. The codes cover the following categories of platforms:
- app stores and device makers with their own ecosystems;
- social networks that allow adult content;
- online gaming platforms;
- messaging services with “adult” themes;
- porn sites and other platforms with 18+ content.
The end of the “I’m 18” button era
Tangible changes have arrived for the porn industry. Self‑declared age via a button click is no longer recognised as an acceptable mechanism. Sites are required to implement robust age‑verification tools.
The response from major platforms was unexpected: a number of sites owned by the Canadian company Aylo blocked access entirely for users in Australia or left only a “safer” version of the content with notices about registration restrictions. At the same time, adult content itself is not banned in Australia. It becomes available once users complete verification.
Apps, games, social platforms—and iGaming in particular—in the crosshairs
App stores must prevent users under 18 from downloading and purchasing apps with an R18+ rating (Australia’s “adults‑only” classification) and ensure age ratings are correctly applied. Online games that have received an R18+ rating from the Australian Classification Board also require age verification. Titles with other ratings are not subject to mandatory checks.
To access licensed gambling services in Australia, it is also necessary to pass age verification. The country has quite a lot of offshore sites that offer not only free cash no deposit, but also a streamlined sign‑up process. Such sites should be chosen with caution, since a player on such a platform will not be protected under Australian law.
Social networks whose rules allow pornography or self‑harm content must verify users before granting access to such material. Platforms where adult content is prohibited by the terms of use are not affected. The obligation is tied specifically to access to restricted material, not to account creation itself.
Generative AI, with restrictions
A separate requirement applies to so‑called “companion” chatbots and generative AI services capable of producing sexually explicit content, scenes of extreme violence, or self‑harm material. 18+ verification must kick in at login or directly when a user attempts to generate content prohibited for minors. General‑purpose chatbots without such capabilities are not the target of the regulation. Mainstream messaging apps are also exempt from mandatory verification.
How verification works—and whether privacy is protected
The government does not collect or store verification data. Processing remains on the service side or with an accredited partner, in compliance with Australian personal data laws. Companies can choose from several methods:
- a government‑issued ID photo;
- camera‑based age estimation without identity retention;
- credit/debit card check;
- digital ID wallets that share only an age status;
- behavioural or AI‑based analysis using account history.
Users are not required to present government ID if alternative methods are available.
A VPN surge—and a circumvention strategy
On the day the new rules launched, downloads of VPN apps surged sharply: three such apps made it into the top 15 free apps in the App Store, with one outranking all social media apps. Using a VPN is legal in Australia, and these tools make it possible to bypass regional restrictions by masking their IP address.
What violators face
The eSafety Commissioner is responsible for monitoring, investigating complaints, and exercising formal enforcement powers. Civil penalties reach A$49.5 million per breach of the requirements. Companies must test and regularly assess the effectiveness of their mechanisms, and users can report breaches directly to eSafety.
The Australian precedent and debates abroad
The model adopted in Australia is already influencing discussions in other countries. In India, the state of Karnataka in March 2026 was the first to propose banning social media for children under 16, and Andhra Pradesh announced restrictions for users under 13. Critics, however, warn that “blanket” age bans ignore the gradual development of teenagers’ digital autonomy and risk widening the gender gap in internet access, especially if families use restrictions as a pretext to keep girls out of online spaces.