Ofcom probes Pornhub’s Apple‑based age checks
According to BBC News, Ofcom has opened an investigation into Aylo, the company that runs Pornhub, over the effectiveness of its new age‑verification system that relies on Apple. The regulator fears the checks may not stop children from seeing adult material, and the outcome could trigger fines of up to £18 million or 10 % of Aylo’s global turnover.
The investigation’s scope
Ofcom’s probe will look at how Aylo built and rolled out the Apple‑based verification and whether it carried out the "necessary due diligence" before launch. The regulator is not examining Apple’s own process, only how the porn site integrates it. If the investigation finds the system insufficient, the law gives Ofcom power to impose the maximum fine.
How the Apple‑based check works
Aylo’s current system asks users to confirm their age through Apple’s iOS platform. When a user signs in with an Apple ID, the phone reports the age stored in the Apple account. The site then grants access if the age is 18 or older. This approach assumes that Apple’s own age‑verification is "highly effective" and that the user cannot easily spoof the data.
| Verification method | Who performs the check | Typical user friction | Known limitations |
|---|---|---|---|
| Apple ID (current) | Apple (via iOS) | Low – single sign‑in prompt | Works only on Apple devices; bypass possible with fake Apple ID or VPN |
| Credit‑card check | Third‑party payment processor | Medium – requires entering card details | Children may use parents’ cards; cards can be stolen |
| Government‑issued ID upload | Site‑hosted verification service | High – scan/upload ID, manual review | Privacy concerns, slower access |
| No check (pre‑2024) | None | None | Full exposure to minors |
The table shows that the Apple route reduces friction but narrows the pool of users to those on iPhones or iPads running the latest iOS version.
What changes for users
In January, Aylo limited access for UK visitors, allowing only existing account holders to log in. By May, the company announced that UK users on Apple devices with the most recent iOS could see the site again, provided their Apple‑verified age was confirmed. Traffic data from October 2025 indicated a drop of more than 75 % in UK visits after the stricter checks were introduced, suggesting many users either gave up or found work‑arounds such as VPNs.
The hidden trade‑off (analysis)
The headline change is that the site now leans on Apple’s age data instead of building its own verification. The trade‑off is twofold:
- Device lock‑in – Only users with compatible Apple hardware can pass the check. This excludes a large segment of the UK market that uses Android or desktop browsers, pushing those users toward alternative sites that may have weaker safeguards.
- False sense of security – Apple’s age data is only as accurate as the information entered when the Apple ID was created. Parents often set up accounts for children and later change the birthdate, or users may simply lie. Because Ofcom is not scrutinising Apple’s process, any weakness there passes straight through to Pornhub.
In practice, the combination of a narrowed user base and a verification that can be spoofed means the overall protection for minors is limited. Meanwhile, Aylo faces a financial risk: a fine of up to £18 million or 10 % of global turnover could dwarf the revenue lost from a 75 % traffic dip, especially if the site’s earnings are spread worldwide.
What to watch next
The investigation will produce a report later this year. Key signals to follow are:
- Any formal finding that Aylo failed to conduct due diligence – that would likely trigger a fine.
- Whether Apple updates its age‑verification API in response to regulator pressure; a change could either tighten or loosen the barrier.
- Shifts in traffic patterns: a rebound in UK visits could indicate users are finding ways around the checks, while a continued decline might push more traffic to less regulated corners of the internet, a risk Aylo itself has warned about.
- Legislative tweaks to the Online Safety Act that could redefine "highly effective" checks, potentially forcing sites to adopt multi‑factor verification.
Practical steps for UK parents and guardians
- Enable built‑in parental controls on iPhones, iPads, and Android devices to block access to adult sites.
- Turn on safe‑search features in browsers and popular search engines.
- Discuss the use of VPNs with older teens; a VPN can hide the device’s location and bypass regional checks.
- Monitor app and account purchases; many children use shared family Apple IDs that may contain inaccurate birth‑date data.
- Consider third‑party filtering software that works across all devices, not just Apple.
