Australia’s eSafety watchdog to examine VPN loopholes in porn age checks
Published
Key Takeaways
- Investigation: VPN age checks face scrutiny as Australia’s eSafety reviews adult sites and possible bypass methods
- Changes: Most major adult platforms added verification measures after Australia’s new online safety rules began enforcement
- Impact: VPN users should note platforms may detect workarounds while regulators assess compliance with age checks.
Australia’s online safety regulator is reviewing whether adult websites are effectively preventing users from bypassing new age verification rules through VPN services. The move comes after most major adult platforms introduced age checks for Australian visitors following new online safety requirements that took effect in March 2026.
The investigation by the eSafety Commissioner focuses on whether websites are taking reasonable steps to stop users from avoiding restrictions by masking their location with VPNs.
Most major adult sites now require age verification in Australia
According to documents prepared by eSafety for Australian Senate estimates hearings and later released through freedom of information laws, around 90% of the 30 most visited adult websites used by Australians in 2025 have introduced age assurance measures for users aged 18 and over.
The new requirements were introduced in March under online safety codes covering services that provide access to adult content, extremely violent material, self-harm content, and other restricted content. The rules require platforms to take steps to prevent children under 18 from accessing such material.
eSafety said it contacted 26 of the 30 monitored adult websites that did not initially have age verification systems in place. Following those discussions, some platforms introduced age checks to meet the requirements.
One major adult content company, Aylo, initially blocked Australian users from accessing its services. The company later changed its approach by removing free access to pornography for Australians and allowing access only through a paid subscription model, which functions as an age verification measure.
Regulator examining whether VPNs can bypass restrictions
Privacy users commonly rely on VPNs to improve security on public networks, reduce tracking, or access services while traveling. However, regulators are also examining whether VPNs can be used to avoid location-based restrictions.
Earlier reports suggested an increase in VPN app downloads among Australian users after the age verification rules were introduced. However, eSafety said it had not found evidence that VPN usage alone explained the decline in visitors to the five largest adult websites.
The regulator said websites covered by the rules are expected to take “reasonable steps” to prevent methods of bypassing age checks, including VPN-based workarounds. eSafety said it would consider how platforms handle VPN detection when assessing compliance.
The regulator is also monitoring whether users are moving away from the largest adult platforms toward smaller websites without age controls. So far, eSafety said it has not found evidence of users shifting in large numbers to a single alternative service.
What VPN and privacy users need to know
The investigation does not mean VPN services themselves are being banned or restricted in Australia. The current focus is on whether online platforms are identifying and responding to attempts to bypass age verification systems.
For VPN users, the main change is that some websites may become more aggressive in detecting connections that appear to come from outside Australia or from VPN providers. This could affect access to certain services, depending on how individual platforms implement their compliance measures.
The information has been verified through documents from Australia’s eSafety Commissioner, which outlined the regulator’s monitoring efforts and compliance reviews.
At this stage, VPN users do not need to take any specific action. Users who access online services through VPNs should be aware that platforms may continue updating their systems to meet Australian age verification requirements. Privacy-focused users should also remember that VPNs are designed primarily to protect connection privacy, not to guarantee access to content restricted by local laws or platform policies.
Related
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular