Introduction
Since the United Kingdom's Online Safety Act took effect in 2023, social media and search engine companies have been required to protect young users by restricting harmful content and implementing age verification systems. However, a recent study by Internet Matters found that roughly one-third of children in the U.K. have found clever ways to bypass these safeguards. From drawing fake mustaches with eyebrow pencils to using AI to age their faces, kids are proving that even high-tech systems have vulnerabilities. This guide breaks down exactly how they're doing it—step by step—and offers tips for parents and developers who want to stay ahead.
What You Need to Know
Before diving into the methods, here's what children typically use to fool age verification:
- Makeup supplies (eyebrow pencils, markers, fake mustaches)
- Smartphone cameras or webcams
- AI-powered apps or filters that alter facial features
- Photos of older individuals (including video game characters)
- Parental assistance (some parents willingly help their kids bypass checks)
- Patience and creativity
Age verification often requires a selfie or a scan of a valid ID. The systems analyze facial features to estimate age—and that's where these tricks come in.
Step-by-Step Methods
Step 1: Draw a Fake Mustache
The simplest method remains surprisingly effective. A 12-year-old boy's mother told Internet Matters, "I did catch my son using an eyebrow pencil to draw a mustache on his face, and it verified him as 15 years old." By adding a few dark strokes above the upper lip, many kids successfully fool age detection algorithms into estimating an older age. This low-tech trick works because facial hair is a sign of maturity that many systems incorrectly associate with being over 13.
Step 2: Use AI to Age Your Face
Some children turn to more advanced techniques. AI-powered apps can distort facial features—adding wrinkles, changing skin texture, or adjusting proportions—to make a young face appear older. One parent noted that her son used an app to modify his selfie before uploading it. The system then returned an adult age, granting access. This method exploits the algorithm's reliance on surface-level cues rather than deeper biometric markers.
Step 3: Substitute with an Older Person's Photo
Instead of altering their own face, kids may upload a photo of an older person entirely. This can be a picture of a parent, an older sibling, or even a video game character with mature features. The survey found that some children used images from games like Roblox to pass the checks. The system accepts the photo as valid, not verifying that the person in the photo is actually the one using the device.
Step 4: Ask a Parent for Help
Surprisingly, 17% of parents admitted to helping their children bypass age verification. In one interview, a parent said, "I have helped my son get around them. It was to play a game, and I knew the game, and I was happy and confident that I was fine with him playing it." This highlights a significant loophole: parents can simply use their own ID or face to authenticate, then hand the device back to the child. Many parents believe the restrictions are too strict or ineffective, so they intervene directly.
Step 5: Exploit System Errors
Even without trying to trick the system, kids often stumble into loopholes. One 12-year-old reported, "On Roblox there’s a thing where you put your face in and are only allowed to chat with that age group . . . I got 15 when I’m 12, so I’m chatting with people older than me when I shouldn’t be." Age verification algorithms are not perfect; they can misestimate ages by several years. This means children sometimes gain unintended access to older age groups, exposing them to more mature content and conversations.
Tips for Parents and Developers
Understanding these methods is only half the battle. Here are actionable tips for both parents and tech companies to close the gaps.
For Parents
- Monitor your child's online activity — check which platforms they use and whether they've been asked for age verification.
- Talk about the risks — explain that bypassing age checks can lead to exposure to harmful content, such as violence, hate speech, or unrealistic body standards (seen by 11% of surveyed children).
- Use parental controls — many devices and apps offer built-in restrictions that do not rely on facial recognition.
- Be aware of your own role — avoid helping your child bypass systems, even if you think the game is safe. It sets a precedent and undermines safety measures.
For Developers
- Improve biometric accuracy — combine facial analysis with other factors like behavioral patterns or device history.
- Implement liveness detection — ensure the selfie is taken live and not a static photo or altered image.
- Add secondary verification — require a second form of ID or a parent's approval for younger users.
- Learn from user exploits — study how kids trick the system (like fake mustaches) and update algorithms accordingly.
As one X user commented, "All that fancy age verification tech & millions spent . . . & kids just draw a fake mustache. Clever little legends." While the creativity is amusing, the consequences are serious: 46% of surveyed children believe age checks are easy to bypass, and many encounter harmful content as a result. By understanding these step-by-step methods, we can work toward systems that truly protect young users.