Age Assurance

Age assurance is the umbrella term for the methods an online service uses to decide whether a user is an adult or a child. It ranges from a birthdate typed into a sign-up form to an ID scan, a bank check or a face-based estimate of age. The UK regulator Ofcom describes it as age verification, age estimation or a combination of both: verification establishes age from evidence such as an identity document, estimation infers it, for example from a face. For NSFW AI and AI companion apps, age assurance is the gate between an adult product and the children it must not reach, and a growing source of conflict over privacy.

Why it matters

The cheapest method is also the weakest. A self-declared birthdate stops only those who tell the truth. Under the UK Online Safety Act, the regulator Ofcom has said that self-declaration, and payment methods that do not require the user to be 18, are not “highly effective.” Its guidance lists methods it considers capable of being highly effective, including photo ID matching, facial age estimation, open banking, credit card checks, mobile network operator checks, digital identity services and email-based age estimation. Whatever the method, it must be technically accurate, robust, reliable and fair. Ofcom expected services that allow pornography to have such checks in place by July 2025 and named certain generative AI tools among the services that publish their own pornographic content.

In the United States, the issue reached AI companions through a bankruptcy court. After Character.AI filed for Chapter 11 in October 2026, a coalition of state attorneys general asked the court to make sure any buyer adopts age assurance that does not rely solely on self-declared birthdates. The states wrote that Character.AI was widely used by minors without adequate age verification from 2022 through 2025, so a significant amount of data from users under 18 was probably misclassified as adult data.

The dispute is about cost. Every stronger method collects something more sensitive: a passport scan, a face, a bank connection. Ofcom says age checks must respect privacy and still let adults reach legal content, and it has declined to set numerical accuracy thresholds for now. For intimate apps, the harder question is what the check ties together: a real name or a face on one side, a record of someone’s fantasies on the other.

Example

Character.AI removed open-ended chat with its characters for users under 18. In their filing, the states pointed out the limit of that step. The restriction, they wrote, applies only to users the company accurately identifies as minors, can be circumvented, and does not cover features such as “Stories,” which let minors set up romantic scenarios between characters. A teenager who entered an adult birthdate at sign-up would, by this account, simply be treated as an adult.

The AIrotic angle

Age assurance turns an intimate space into a checkpoint. Erotic AI promises a private room where desire can be spoken without being seen, and the age check is the moment the room asks who you are. That tension sharpens with products like Meta’s Muse, an agent for users 18 and over that will also write sexual content and sits next to the user’s email and calendar.

Protecting children is not negotiable. The open question is how to do it without building a register that links legal identities to the most private conversations people have ever had with a machine. The best age check is the one that proves a single fact, over 18, and forgets everything else.