Are age verification banners effective?

Question

I'm curious as to whether or not these Age Verification banners that appear on some sites are really "effective". That is to say, do these really help to deter/prevent users that are underage from reaching their website?

A common example of websites that may have this feature are video games that have 17+ esrb/pegi ratings, alcohol companies, and NSFW sites.

If anything, is there any way to effectively enforce ages on any given site? Does an "age verification" banner work? If not, what is its primary use?

Answer 1

Age check tests

Leisure Suit Larry was probably the first application to do this, and considering that I played it when I was about 11 years old, I would call it ineffective.

Making some sort of test to make sure that you are old enough, simply encourages younger users as it makes them feel more 'adult'. Additionally, the test was designed for a typical US adult experience, and also had the effect of filtering out adults of other cultures. My father for example, couldn't pass it the first few tries.

Age check buttons

The other option is an age verification button. Nobody seriously thinks that these are effective. What do you think a 13 year old boy will do when he sees this?

Credit card verification

The only somewhat effective method that I have seen for this is to verify by credit card information, and later on a password. This is the way that Apple and some adult sites handle it. Although it is effective, it only works in limited situations where 1) you have payment processing 2) people are trusting enough to give you their credit card information.

Reason

I have yet to see an example of a company doing this because they want to restrict younger viewers. In the USA, for example this is done on alcohol sites, but it is common knowledge that underage drinkers make up a large chunk of the companies profits. They clearly don't want this to stop.

The real reason behind all of this is legal liability. Companies want to say that they asked first, and so make have legal deniability if someone underage uses their product, or simply deniability to parents that don't want their kids to see something.

TL;DR: Do this if you need to legally, but it will be ineffective in confirming if someone is an adult.

---

This image sums it up:

Answer 2

I'm pretty sure that they are completely ineffective at detering younger audience members (source: myself when I was younger)

The purpose of them seems to be more about the content owner covering themselves against getting in trouble for showing inappropriate content to minors

Answer 3

Make a two-step process: First, ask for the birth date. Then in a second and separate step, ask for the age.

Often when the age is faked, the birth date is completely random, so entering your age afterwards (without being able to look back) is pretty hard.

Answer 4

These are completely ineffective, just as ineffective as "I'm over 18".

However, they do effectively protect the website from COPPA. If the fact that a certain website has an underage user on it is brought to the attention of the courts, the site can expose its logs, and say that "the user claimed that s/he was over 13, so we didn't know".

It's a legal shield, that's all. Just like the "I agree" checkboxes for long ToSs that nobody reads.

Answer 5

Disclaimer: This is no means by an original idea of mine, but for the love of me, I can't remember where I came across it. I will post an update when I discover its source.

The basic idea for age verification revolves around asking the user an era-related pictorial question. Anybody who's lived through that era should be able to immediately relate to it, while more recently-born users would hardly have a clue.

Here are a few examples that would permit access to users from the 90's, but keep out users from the 2000's:

 Q: What's the relation between a cassete and a pencil?
 A: To wind up a spool

 Q: Identify the brand and type of this music player: 
 (A: Sony Walkman Cassette Player)

Q: Where have you seen this iconic car?:
(A: Knight Rider)

Q: Identify this popular videogame:
(A: Contra)

Unless a younger user is quite knowledgeable about older pop culture (or knows about TinEye or Google Reverse Image Search), this age gate mechanism would prove to be quite a deterrent. You would most definitely have a much smaller percentage of break-ins from younger users in comparison to conventional age gates.

On the downside, this approach might be pose a severe implementation challenge:

• You would need a large pictorial question bank, from where your system would randomly pick questions.
• You would need to implement the mechanism to obtain the answer as a text box which would mean your must have a tolerance over the answers ('Sony Walkman Cassette Player','Sony Walkman Tape Player','Sony Tape Player' etc. would all count as valid answers to Q1 above).
• You would need to decide a limit on how many questions a user is allowed to answer incorrectly before you decide that the user is infact a minor. You might even choose not to have this limit, and allow the user to try infinitely.

If you're really keen, this is worth a shot!

EDIT :
The questions above are just examples to show how this model could be worked, and do not pertain to actual questions. In order to cater to a larger audience, questions would have to be more diverse. Moreover, users could always retry if they got answers incorrect.

As discussed in the comments below, questions like the "Contra" one pose cultural/localization issues. To circumvent such issues, you'd need to either have a bank of universally applicable questions, or culture-specific questions that can be posed after first asking the user his choice of country/language.

EDIT 2 :
This answer has received enough flak already, and there's no point mulling over it any more. What initially sounded as a fun and creative idea has now dawned on me as being heavily flawed. Let's just shelf this and move on, shall we?

Answer 6

There's only one way to verify a person's age, and that is to have that person go to your head office in person and present their certified birth certificate plus official photo ID. And even then, they could have hired someone else to do it for them and issued them with false documents (but you might be able in some countries to verify the validity of such documents with the government, in many countries however that's not legally possible).

Of course by doing so you're alienating most of the planet as your potential customer base, as for everyone who doesn't live within a short distance of your office the trip to go there in person to register for using your website would be too much of a bother (and for many way too expensive and time consuming even if they were inclined to do so otherwise).

Don't expect to get many responses either (and certainly far less valid ones) by demanding people email scans of their passport or driver's license. Not only do many people not own the tools to make those scans, in many countries it's actually illegal to send them to 3rd parties unless under very specific restrictions (like your employer's HR department may be exempt, your website certainly will not be exempt).

And of course you'd have no way whatsoever to certify whether the documents you get mailed are a) genuine and b) pertaining to the person sending them.

So you're going to have to trust people, and using a system like just asking for an age will at the very least stop some kids. And IMO that's more than enough, if parents were actually parenting they'd stop their kids themselves, if they're not I couldn't care less about what their kids do on the internet as long as I'm not legally liable for it and this system is enough to guarantee that AFAIK.

Being a moderator in adult zones in second life, I have to deal with these issues regularly, and we catch several minors each and every day who enter an incorrect age to bypass the restrictions (and then they again have to explicitly deactivate filters in the second life client software that block adult rated content unless deactivated, AND then explicitly select wanting to end up in our areas). These kids (the youngest we've caught recently was 8 years old) are quickly booted out and reported to the owners/operators of second life who terminate their accounts, and that's indeed all you can do, terminate those who bypass the filters by entering incorrect information.

Answer 7

If you do a search for age verification best practices on alcohol related sites, you will see that there is a general consensus that these age verification splash pages rarely work but are often required as a part of company policy. To quote this smashing magazine article

During my research, I wondered if there were any laws in Canada or the United States that required the use of such a splash page. I contacted Labatt Breweries of Canada and I was informed that there was no law requiring the age verification screen, but that it was a company policy to have the user enter their date of birth. Okay, that’s fair enough. But I wondered why they would opt for the complicated version over the simple examples shown above. The woman I spoke to reemphasized that it was a company policy to have the user enter their exact date of birth. She suspects it’s the same for most other companies as well. I had also contacted Anheuser-Busch but hadn’t heard back from them.

However if you reference the article more, there are some suggested best practices on how to best design a verification which suggest keeping a simple question\answer option with a single choice.

image credit: http://uxmovement.com/forms/simpler-and-friendlier-age-verification-page/

That said you cant really prevent an user from entering a false age and signing up or viewing the content.

Answer 8

Sadly the only effective way is to make a verification based on an official document, a passport or a visa.

This is in no means waterproof (as the person in question can get that information from someone else, mom or dad comes to mind)

In short there is no real or practical solution for age verification. Everything can be bypassed one way or another.

Answer 9

Banners are not effective. See the obligatory New Yorker cartoon.

Answer 10

The simple questions about age are not intended to keep out people who are too young, but rather to prove that a deliberate warning about the content was worked around. The person asking the question can then say that the access was not authorized by them since the user violated terms of service and was thus not an authorized visitor.

As far as ways to strongly verify someone's age, you can try using a service like banks do for identity verification where questions are asked about the person and that is used to prove their identity and then a public records check can get their age from birth records, but this won't work in every location (some places don't have public birth record databases.) It also doesn't necessarily prevent someone from sneaking by as someone they are not. And finally, depending on the type of site, someone may not be particularly eager to provide information like social security number to many types of sites that would require strong age verification.

Answer 11

I don't think that age verification banners are meant to restrict users from accessing the content. It is more of a legal covering for the companies that display such a banner.

I propose this solution:

Require the user to sign in before viewing content with a third party ID that has the users birth date included (Facebook, Google+, etc.).

You can then check the birth date on the user's third party account and grant or deny access accordingly.

This could also be a deterrent for those lying about their age because it is more time consuming to make a fake account for gaining access to your restricted content.

Answer 12

In the UK you could check credit records to verify someone's identity and age, provided the user consents to it. Still not infallible but probably no more/less so than asking for scans of ID (which can be tampered with anyway).

Answer 13

There is no way to ensure this kind of verification without falling back onto a second form of identification like a (confirmed) birth certificate or ID.

Probably the most applied verification for the moment is Facebook login. When registering to Facebook (as I recall, only 16+) you enter your date of birth. Once you try to enter a website, and lack the proper Facebook age, the website can effectively block you.

Of course this can be overcome by creating a dummy Facebook account etc., but at least it takes more effort, and will be a good barrier.

Answer 14

I would like to note there is one really sensible, pragmatic reason for age verification requests on a website - to warn people of exactly what kind of site they are accessing before it is simply foisted upon them. Let's face it, there is a lot of ways to come across a link in a way that it will not be labeled with "NSFW" (Not Safe For Work) even if it should be.

It's just polite to warn people so they can choose for themselves whether or not they want to see it now or at all, you know?

I think of it a bit like saying "have a nice day" or "thank you" to a customer; no, most companies don't really care so long as they get their money anymore than most makers of violent video games (and the like) actually care whether or not 12 year-olds are watching a Trailer of God of War III, but that doesn't mean us responsible individuals shouldn't be polite and say thank you and warn people before you show them a squirrel being Xed to Y by a wildebeest.

Answer 15

No I used to say I was 30 when I really was 12. Most of my friends at school did the same with such sites as well. In my opinion the banners aren't really their to prevent minors from going to the site, but to protect the company. If a kid does go on the site the company can not be responsible because they stated that you need to be 18 or older.

If you really need to prevent kids from getting onto the site, you should request for credit card info or ask questions that 90% of kids born in certain year wouldn't know, but most older people would know.

Answer 16

If you really want to keep children out of a site, then it's not going to be done through UI like this.

A better idea might be to find out what are the most popular solutions that parents (schools, libraries, ...) are using to filter out access to websites, and whether there are some proactive steps which you can take for your domain names to be listed in the databases used by those tools.

Keeping kids out of adult sites is the job of the parents, educators, or whoever else runs a LAN used by children. They have to install the measures so that adult sites are not accessible at all.

But if you have content which is actually "not safe for work", it's helpful to users to have a safe front page with a one-click Enter button.

Answer 17

Age verification banners have little to do with verifying age. Their main purposes are boosting a site's image and reducing liability. Having a good image in the view of the public can boost the success of a web site greatly. People who think of a web site as bad for the youth might not shop there and might even spout negative information to their friends. It's the bad version of word of mouth. The banner gives such people the impression that the web site owner is making an effort.

As for legal liability, this one is trickier. The main area of application is in alcohol and cigarettes. There's strong laws regulating their sale to minors. These companies have been sued in the past for promoting to minors. Having a scheme on their site to block minors lets them say they're trying to keep minors away. Doing little things like this can improve standing in front of a jury.

But, as for actual verification, no it doesn't work unless the kid has very little reasoning ability or willingness to break the rules. It's just politics. :)

Answer 18

Absolutely not. My son, would falsify his age so he could play a game rated for violence - as would any high school kid - and I would set up an gmail account for my daughter for google play and be denied access to her apps because of age (so I have to put a random age in, just to get it to work). It's great that methods are in place however these systems need to point to parental authority, rather than flat out deny access - let us make the decision on what is right or wrong for our children, and what they are capable of handling, and how indeed their maturity level is. I would appreciate it even more if the banner systems collected some form of id, like a SSN, in which a teen child have to explicitly either violate their parent's trust by taking this information and entering it (and please make this a minor juvenile offense) or would have to come and bring the decision to the parent - not leave it in the child's hands. Furthermore, I would really like to see a systematic implementation across the board of banner systems so that we as parents, can be held responsible for how we raise our children because as a parent when the oneness is on you, it suddenly makes you think.