Editorial

UK Online Safety Act

The UK Online Safety Act and Ofcom Part 5 age assurance are live. See which AI girlfriend and cam platforms verify UK users and which geo-block in 2026.

What the UK Online Safety Act does

The UK Online Safety Act 2023 puts a statutory duty on any service that publishes or hosts pornographic content: use "highly effective age assurance" before you let anyone in. Ticking a box that says "I am 18" doesn't count, the law says so explicitly. The regulator is Ofcom, and it keeps the approved-methods list current in its Part 5 guidance. As of May 2026 the approved methods include photo-ID matching, facial age estimation, mobile-network-operator checks, credit-card 1p transactions and digital ID wallets. Get it wrong and a service is on the hook for fines of £18 million or 10% of qualifying worldwide revenue under section 132. That's the number that makes operators move.

The 2024-2026 enforcement timeline

Royal assent landed in October 2023. Ofcom's first round of Part 5 guidance went live on 25 July 2025, pinning down what counts as a "primary purpose" adult service and what the highly-effective-assurance test actually means in practice. A second wave of compliance deadlines hit through Q1 2026, pulling in adjacent platforms whose main purpose isn't pornographic but whose mixed content still trips the in-scope threshold. Most platforms rolled their deployments out quarter by quarter rather than flipping a single switch, and several stacked multiple vendors to cover different UK regions and device types. The part that catches operators off guard is the reach: the law applies extraterritorially. A platform incorporated in Cyprus or the United States is still in scope if its content reaches a UK user, and Ofcom signalled in its 2026 supervisory updates that enforcement follows the audience, not where the operator happens to be registered.

What it means for cam-site users

The big cam platforms are already compliant in practice. Chaturbate (full review) rolled out Incode verification first for the US Texas Attorney General settlement in April 2024 (a $675,000 deal), then extended the same gate to UK traffic to satisfy the Online Safety Act. Stripchat, LiveJasmin, Jerkmate and BongaCams all show working age gates for UK IPs, and you'll commonly see Yoti and Persona named as the third-party vendors behind them. From the user side it's a one-time ID or facial-estimation check that sticks to your account, so you don't get pinged every session.

What it means for AI girlfriend users

The AI side is messier. Candy.ai (our full review) stays open to UK users with a self-declaration gate, no ID upload required. Joi.ai does the opposite: it geo-blocks UK addresses at the platform level and dumps visitors on an unavailable notice page. That split tells you something about how the space reads the law. AI companion platforms run synthetic-only content, so they face a softer regulatory frame than live human broadcast, and each operator makes its own call on whether to build a gate or just pull out of the market entirely. If you're a UK reader who wants a working AI girlfriend in May 2026, Candy.ai is the realistic default. Joi.ai simply won't load.

VPN reality and the DPA risk

Plenty of people reach UK-restricted platforms through a VPN. Ofcom guidance doesn't criminalise the practice, and the duty sits on the platform, not on you. But there's a catch the Information Commissioner's Office and consumer-protection people keep flagging: paying for a platform you can't legally use from your real location can void your chargeback protection, breach the site's terms of service, and drop you into fraud-screening friction. It gets worse if the platform you reach also has US state geo-blocks, because rotating your billing IP can trip fraud flags at the payment processor. I ran into exactly that once testing a checkout through a Frankfurt exit node: the card bounced, the support ticket went nowhere, and the "subscription" I'd paid for was unrecoverable. We document the pattern because it's real. We don't recommend the route.

Where to go next

If you're a UK reader trying to navigate the 2026 landscape, the practical answer comes down to two clean routes. Pick a cam platform that's shipped a working age gate under the UK Online Safety Act (the four named above are the cleanest of the major sites), or pick an AI platform still operating in the UK with documented self-declaration, where Candy.ai is the current default. For a deeper read on the statute itself and the adjacent US and EU regimes, our legal guide walks the whole compliance perimeter.

Resources

Frequently asked questions

What is the UK Online Safety Act?

The UK Online Safety Act 2023 is a statute that imposes a duty on services publishing or hosting pornographic content to use highly effective age assurance to prevent under-18 access. Ofcom is the regulator. Part 5 guidance took effect 25 July 2025. Maximum fines reach £18 million or 10 percent of global revenue under section 132.

Does the Online Safety Act apply to AI girlfriend apps?

Yes when those apps publish or host sexually explicit content accessible from the UK. The duty attaches to the service, not the editorial comparator. AI companion platforms generally run lighter age checks than live cam sites because their content is synthetic, but Ofcom still expects effective age assurance and not a self-declaration tick-box.

Which cam sites verify age for UK users?

As of May 2026 Chaturbate, Stripchat, LiveJasmin, Jerkmate and BongaCams all run Ofcom-compliant age verification for UK traffic. Vendors named in public disclosures include Incode (Chaturbate), Yoti and Persona. Each platform routes UK users through a one-time ID or facial age estimation gate before granting access.

Can I use Candy.ai in the UK?

Yes. Candy.ai remains accessible from UK IP addresses as of May 2026 and uses a self-declaration gate at signup rather than ID upload. Joi.ai by contrast geo-blocks UK at the platform level and routes UK visitors to a notice page rather than offering a verification path.

Is using a VPN to bypass UK age checks illegal?

Ofcom guidance does not criminalise VPN use, and the statutory duty falls on the platform, not the visitor. The Information Commissioner's Office has separately noted that circumventing age assurance to access adult content may expose consumers to fraud, chargeback friction and platform terms-of-service breach. We do not recommend the route.

UK Online Safety Act