The UK's Online Safety Act Is Now Fining Adult Sites Real Money: What Changed in 2026
We’ve covered the US side of visitor age verification on this blog before — the Supreme Court’s Paxton ruling and the wave of state laws it unlocked. The UK has been running its own, separate version of this fight, and in 2026 it moved from written guidance into actual fines. Here’s what Part 5 of the UK’s Online Safety Act requires, and what Ofcom has done to enforce it.
What Part 5 actually requires
Part 5 of the Online Safety Act covers publishers of pornographic content specifically, separate from the Act’s broader rules for social media and search platforms. Ofcom published its final guidance — “Highly effective age assurance and other Part 5 duties” — on January 16, 2025, and the underlying duties came into force the next day, January 17, 2025. From that point, any Part 5 service was required to have “highly effective age assurance” in place to keep UK visitors under 18 from accessing pornographic content, not just a checkbox or a self-declared birthdate. Ofcom’s guidance treats photo-based age checks with no liveness detection, for instance, as insufficient, since a minor can simply upload a photo of an adult.
From guidance to fines
The duties took effect in January 2025, but 2026 is when Ofcom’s enforcement became visible and expensive. In December 2025, Ofcom fined AVS Group Ltd, which operates 18 adult websites, £1 million for failing to implement effective age checks — its photo upload system lacked liveness detection, meaning a child could bypass it with someone else’s photo. AVS Group was also fined £50,000 separately for not responding to Ofcom’s information requests, with daily penalties of up to £1,000 threatened if compliant age assurance wasn’t deployed within 72 hours of the ruling.
That wasn’t an isolated case. Ofcom’s March 2026 industry bulletin disclosed further enforcement: 8579 LLC was fined £1.35 million for failing to implement effective age assurance, plus a further £50,000 for non-compliance with information requests and daily penalties of £1,000 until it deployed age checks. Kick Online Entertainment SA was fined £800,000 on similar grounds, with an additional £30,000 penalty and daily fines of £200 until compliance. These aren’t warning letters — they’re real, escalating financial penalties tied to a daily clock.
Where compliance stands industry-wide
The same March 2026 bulletin gives a sense of how the wider industry has responded: of the top 100 dedicated pornography services Ofcom tracks, 77 had age assurance mechanisms in place as of January 2026, and a further 7 had chosen to geoblock UK users entirely rather than build UK-specific age checks — the same strategic tradeoff some large platforms made with US state laws, trading a compliance build-out for lost UK traffic. Ofcom has also sent legally binding information requests to larger platforms covering recommender systems, age policies, grooming protections, and product-safety testing, with a response deadline of April 30, 2026, and enforcement action threatened for platforms that miss it.
Why this is a separate compliance layer, not a duplicate one
It’s worth being precise about what this does and doesn’t overlap with. Part 5 of the UK’s Online Safety Act governs who can view content from UK IP addresses or accounts — it’s a visitor-facing age-assurance duty, similar in spirit to the US state age-verification laws we’ve covered, but a wholly separate legal regime with its own regulator, its own guidance, and its own fine schedule. It’s also distinct from creator-facing identity verification (confirming a creator is who they say they are before they get paid) and from the US TAKE IT DOWN Act’s 48-hour non-consensual-imagery removal requirement — three different compliance obligations that happen to apply to overlapping categories of platform, each enforced by a different body under different law.
For any platform operating in or reachable from the UK, the practical takeaway from 2026’s enforcement wave is that Ofcom is treating “we have some kind of age check” as insufficient if it can be trivially defeated, and that penalties compound daily the longer a gap goes unfixed. That’s a meaningfully different posture than simply having guidance on the books.
IsleFans launches September 15, 2026. For how IsleFans’ confirmed compliance and verification steps compare to other platforms today, see the full platform comparison table, and for the equivalent US-focused picture, see our earlier look at state and federal age-verification laws reshaping adult platforms.