Ofcom investigates Pornhub’s age verification under UK’s Online Safety Act

Ofcom has launched an investigation into Aylo, the owner of Pornhub, to determine whether its new age verification process complies with the UK’s Online Safety Act. The regulator is scrutinizing the effectiveness of the system, which relies on Apple’s technology for some users, and whether Aylo conducted adequate due diligence before its implementation.

Ofcom launches investigation into Aylo’s age verification

According to BBC News, Ofcom has opened an investigation into Aylo, the parent company of Pornhub, to assess whether its new age verification process complies with the UK’s Online Safety Act. The regulator is scrutinizing whether the process is "highly effective" in preventing children from accessing adult content, as mandated by the law.

The investigation follows concerns raised by Ofcom about the adequacy of Aylo’s due diligence and testing before implementing the new system. The regulator stated that Aylo "may not have conducted sufficient due diligence and testing" prior to its rollout, a claim that will form a core part of the inquiry.

Apple’s role in the verification process

The new age verification process introduced by Aylo relies on Apple’s system for some users. However, Ofcom has signaled that it believes this method "may not be highly effective" in achieving its intended goal. While the regulator will examine how Aylo implements the process, it confirmed it will not investigate Apple’s technology itself, as reported by BBC News.

Aylo defended its approach, arguing that Apple’s system "provides significantly stronger protection than any other age assurance method currently available in the UK market." The company also noted that Ofcom had previously praised Apple’s technology as "a real win for children and families."

Impact of the Online Safety Act

Under the UK’s Online Safety Act, websites hosting pornographic material are required to implement "highly effective" age assurance measures to ensure users are over 18. The Act grants Ofcom the authority to impose fines of up to £18 million or 10% of a company’s annual global turnover, whichever is greater, for non-compliance, according to BBC News.

The introduction of stricter age checks in October 2025 led to a significant drop in UK traffic for Pornhub. The company reported a 75% decline in users from the region, raising questions about whether some were bypassing the checks using Virtual Private Networks (VPNs).

In January 2026, Aylo temporarily restricted access to Pornhub in the UK, citing the tougher age verification requirements as the reason. The site later reopened for some UK-based Apple users who had confirmed their age using the latest version of iOS.

Aylo’s criticism of the Act

Aylo has been vocal in its criticism of the Online Safety Act, arguing that the legislation has "not achieved its goal of protecting minors." The company claimed that requiring individual pornographic sites to verify users’ ages diverts traffic to riskier, unregulated platforms that do not comply with Ofcom’s rules.

Research by the Lucy Faithfull Foundation, cited by BBC News, supports this concern. The study suggested that non-compliant sites may host harmful or illegal content, including sexual images of children. Aylo stated it would cooperate fully with Ofcom’s investigation but maintained that the Act’s approach is flawed.

What this means

LazyFounders analysis — our interpretation, not reported fact.

For founders and operators, this investigation underscores the growing regulatory scrutiny on age verification systems, particularly in high-stakes industries like adult content. The UK’s Online Safety Act sets a high bar for compliance, and Ofcom’s actions signal that even well-resourced companies must prioritize rigorous testing and due diligence before deploying such systems.

Aylo’s reliance on Apple’s verification system highlights a broader trend: startups may increasingly turn to established tech partners to meet regulatory requirements. However, this approach doesn’t absolve them of responsibility—regulators will hold them accountable for the effectiveness of third-party solutions.

The 75% drop in UK traffic after stricter checks were introduced also raises questions about the trade-offs between compliance and user experience. Founders must weigh the risks of losing users against the legal and reputational consequences of non-compliance. Finally, Aylo’s argument that the Act diverts users to unregulated sites is a reminder that regulation often creates unintended consequences—something operators should anticipate and mitigate.

Key takeaways

• Ofcom’s investigation into Aylo focuses on the effectiveness of its age verification process and the adequacy of pre-launch testing.
• The UK’s Online Safety Act requires sites hosting adult content to use "highly effective" age assurance methods.
• Aylo’s use of Apple’s verification system is under scrutiny, but Ofcom will not investigate Apple’s technology itself.
• Pornhub’s UK traffic dropped by 75% after stricter age checks were introduced, highlighting the impact of compliance on user access.
• Aylo claims the Act fails to protect minors and pushes users toward unregulated, potentially riskier sites.
• Ofcom can impose fines of up to £18 million or 10% of global turnover for non-compliance with the Act.

FAQ

What is Ofcom investigating?

Ofcom is investigating whether Aylo, the owner of Pornhub, has implemented a "highly effective" age verification process to prevent children from accessing adult content, as required by the UK’s Online Safety Act. The regulator is also assessing whether Aylo conducted sufficient due diligence and testing before rolling out the system.

Why is Aylo’s reliance on Apple’s system under scrutiny?

Aylo’s new age verification process uses Apple’s system for some users, but Ofcom has raised concerns about its effectiveness. While Ofcom will not investigate Apple’s technology itself, it will examine how Aylo implemented the process and whether it meets the legal standard of being "highly effective."

What are the consequences for non-compliance with the Online Safety Act?

Under the Online Safety Act, Ofcom can impose fines of up to £18 million or 10% of a company’s annual global turnover, whichever is greater, for failing to comply with age verification requirements.

How did Pornhub’s UK traffic change after stricter age checks were introduced?

Pornhub reported a 75% drop in UK traffic following the introduction of stricter age checks in October 2025. Some observers have suggested that users may have turned to VPNs to bypass the restrictions.

What is Aylo’s criticism of the Online Safety Act?

Aylo has argued that the Act fails to protect minors and instead diverts users to unregulated sites that may host harmful or illegal content. The company claims that requiring individual sites to verify ages is an ineffective approach.

Related on LazyFounders

• Apple
• More policy news