Britain Probes Pornhub's Owner Over Weak Age Checks

Weak Age Checks on one of the world's most visited adult websites have drawn the attention of Britain's media regulator. Ofcom announced on September 23 that it had opened a formal investigation into Aylo, the company behind Pornhub, over whether the platform's age-verification system meets the "highly effective" standard required by the country's Online Safety Act.

At the center of the probe is a system Pornhub began using in May, which leans on age signals passed from Apple's devices. Instead of checking a document or scanning a face itself, the site receives a signal suggesting a visitor "may have completed Apple's age checks," according to Ofcom's announcement of the investigation. The regulator says it is concerned Aylo may not have carried out enough due diligence and testing before switching the system on — and that, as a result, children might still be reaching material the law says they must not see.

Crucially, Ofcom drew a line around its target. "Our investigation will not make a determination on how Apple operates its age checks," the regulator said in a statement, as reported by Reuters. The question is not whether Apple's technology works, but whether Aylo did its homework before relying on it. That distinction matters because it puts the legal burden squarely on the platform, not the device maker.

A Year of Fines Paved the Way

The investigation is the latest escalation in a fast-moving enforcement campaign. In February, Ofcom hit Reddit with a £6.4 million penalty over failures to keep children from harmful content — one of the first big actions under the new regime. Then in September, the regulator fined one pornography provider £700,000 for missing age checks, plus another £30,000 for ignoring a legally binding information request, according to Undercode News. A separate provider, Youngtek Solutions, drew a £500,000 penalty for the same shortfall.

All told, fines against adult-content platforms for age-check failures have already passed £1 million, Reuters reported. If the Aylo case goes against the company, the stakes climb far higher: the regulator can fine a business up to £18 million or 10 percent of its qualifying worldwide revenue, whichever is greater — or block a non-compliant site in the UK entirely. For context, Ofcom's guidance says simply asking users to confirm they are over 18 is not enough; platforms are expected to use real age-assurance technology such as facial age estimation or identity checks.

Aylo Says the Rules Are Backfiring

Aylo is not taking the scrutiny quietly. Shortly before the investigation opened, Pornhub sent a letter to around 300 members of Parliament arguing that the new rules have failed at their stated goal and are instead pushing users toward sites that ignore the law, according to SFG Media. The company claimed those non-compliant services now rank prominently in search results, siphoning traffic away from platforms that play by the rules.

Aylo also said Pornhub's UK traffic fell by 77 percent after the age-check requirements took effect — a figure that does not account for VPN users, who can route around British restrictions. Alex Kekesi, Aylo's vice president of brand and community, said in a statement that the company would fully cooperate with the regulator, adding that Apple's device-level age-verification update offers "one of the strongest and hardest to circumvent protections currently available," as reported by Cybernews.

What Weak Age Checks Mean for Everyone Else

This case reaches far beyond one website. George Lusty, Ofcom's director of enforcement, has said online age checks are an important protection against children encountering inappropriate material, and that technology firms are expected to make sure such systems are highly effective before they go live. The Weak Age Checks at the center of this dispute are therefore a test case for the entire industry — and the Reddit precedent shows social platforms are not exempt.

For young people, the practical upshot is already visible: more sites now ask visitors to prove their age with a face scan, an ID document, or a bank card before letting them in. That creates a genuine trade-off between safety and privacy, since every check hands sensitive data to somebody. It is part of a wider wave of digital regulation reshaping online life, from the right to disconnect to the way young people push back against online pressures — whether through Hong Kong's instant-camera revival or protest symbols like the One Piece flag.

There is a counterweight worth sitting with. If Aylo is right that strict rules simply move traffic to lawless corners of the web, then enforcement that looks tough on paper could be failing in practice. The investigation will test whether Britain's approach can survive contact with the open internet — or whether users, armed with VPNs and workarounds, simply route around the rules. The regulator has not given a timeline for its decision, but with fines already in the millions and a maximum penalty that could dwarf them, every major platform with a young audience is now on notice.