Youngsters have started widely bypassing online age verification systems by employing an extremely simple trick: moustaches drawn with a cosmetic pencil. Research conducted by the British non-profit organization Internet Matters revealed that certain age recognition algorithms mistake this makeup for adult characteristics, thereby granting minors access to restricted websites.
The organization surveyed one thousand children regarding the functionality of internet age checks. Roughly half of the respondents stated that circumventing such systems poses no significant difficulty.
The report indicates that children possess a good understanding of precisely how age verification controls operate and actively exchange methods for bypassing them amongst themselves. Among the more unusual examples cited are drawing on moustaches and beards. According to the survey participants, this particular technique “proved effective on multiple occasions.”
The researchers also highlighted alternative methods of circumvention. Some children presented “adult” video game characters to the camera or simply made bizarre facial contortions, leading the systems to incorrectly classify them as adult users.
Illustration: Nano Banana
This issue arises amidst the rapid proliferation of laws mandating age verification online. In numerous nations, users are required to confirm they are of legal age to access adult-oriented sites—frequently necessitating the submission of passports, driver’s licenses, or selfies to third-party identification services.
Such legislation is already in force across approximately half of US states, as well as in the United Kingdom, which has emerged as a primary catalyst for the global adoption of age verification.
In response to these new mandates, major technology firms have begun altering their services. Apple has released updates to comply with the new standards, while Meta* and Reddit utilize a mixture of document checks and facial appearance-based age estimation algorithms. Discord, conversely, postponed the rollout of certain features following user backlash and concerns regarding data security.
Critics of these laws caution that age verification systems generate massive repositories of personal data, which are susceptible to breaches or hacking attempts. Furthermore, the very concept of mandatory user identification is increasingly raising alarms regarding privacy and the openness of the internet.
The “drawn moustache” incident simultaneously exposes both the technical limitations of current algorithms and a deeper, more pervasive problem: contemporary systems remain highly susceptible to rudimentary evasion techniques, despite substantial financial investment and tightening regulatory oversight.
About the Author
