Enforcement register
Ofcom's age-assurance enforcement programme and the ICO's actions, dated and linked to the regulator's page. Ofcom's register was last updated 30 September 2026; we read it on 18 October 2026. Fined and investigated parties are named as the regulator names them; domains appear as text only.
Ofcom's July 2026 report counted 23 investigations, 7 providers fined and £4,955,000 in penalties as of 15 July 2026 Ofcom. The fines listed below total £21,435,000 including the ICO's Reddit penalty and decisions since that report.
Fines
| Date | Regulator | Party | Amount | Basis | Source |
|---|---|---|---|---|---|
| Ofcom | xgroovy.com | £730,000 | £700,000 plus £30,000 A non-confidential Confirmation Decision issued on 29 September 2026 was published on 30 September 2026. | ofcom.org.uk | |
| Ofcom | fapello.com | £630,000 | £600,000 plus £30,000 One research source lists this investigation as still open from 12 May 2026; confirm on the register. | ofcom.org.uk | |
| Ofcom | First Time Videos LLC | £80,000 | Section 81 | ofcom.org.uk | |
| Ofcom | Youngtek Solutions Ltd | £600,000 | £500,000 plus £100,000 | ofcom.org.uk | |
| Ofcom | 4chan (entry) | £520,000 | £450,000 for failing to use highly effective age assurance (section 12), £50,000 for the illegal content risk assessment (section 9(2)) and £20,000 for terms of service (section 10(5)); compliance deadline 2 April 2026, then daily penalties of £500, £200 and £100 | ofcom.org.uk | |
| ICO | Reddit, Inc. (entry) | £14,470,000 | No lawful basis for processing under-13 data, no data protection impact assessment before January 2025, self-declaration only until July 2025 The ICO's own press page was not readable by this site's fetcher; recorded from law-firm summaries. | osborneclarke.com | |
| Ofcom | 8579 LLC | £1,400,000 | Section 12 (£1,350,000) plus £50,000; £1,000 a day until compliant | ofcom.org.uk | |
| Ofcom | Kick Online Entertainment S.A. (motherless.com) | £830,000 | Section 12 (£800,000) plus section 102(8) (£30,000); non-compliance 25 July to 29 December 2025. Not the Kick streaming service. | ofcom.org.uk | |
| Ofcom | AVS Group Ltd (18 sites) | £1,050,000 | Section 12 (£1,000,000) plus £50,000; £1,000 a day from 6 December 2025 until compliant | ofcom.org.uk | |
| Ofcom | Itai Tech Ltd (Undress.cc) | £55,000 | Section 81 (£50,000) and section 102(8) (£5,000) | ofcom.org.uk | |
| Ofcom | 4chan (entry) | £20,000 | Failure to comply with two statutory information requests (section 102(8)(a)); the first fine issued under the Act | ofcom.org.uk | |
| Ofcom | Fenix International Ltd (provider of OnlyFans) (entry) | £1,050,000 | Inaccurate information to Ofcom about the facial-estimation challenge age (20 rather than 23) | ofcom.org.uk |
Investigations and letters
- — Ofcom: Investigation opened, Aylo Freesites Ltd (Pornhub) (entry). Whether the age assurance process introduced in May 2026, which relies on Apple signals that UK iOS and iPadOS users may have completed Apple’s age checks, is highly effective, and whether Aylo did sufficient due diligence and testing before adopting it (sections 12 and 36). Ofcom will not make a determination on how Apple operates its age checks. Case CW/01358/09/26, published 23 September 2026. ofcom.org.uk
- — Ofcom: Investigation opened, TikTok (entry). Section 12 investigation focused on the age-inference system; first update expected around October 2026. ofcom.org.uk
- — Ofcom: Statement or letter, Facebook, Instagram, Roblox, Snapchat, TikTok, YouTube. Ofcom’s update on the responses to its 12 March letters: it is “not currently convinced” that the commitments by Snapchat, Facebook, Instagram and TikTok ensure they will effectively prevent under-13s from accessing their services; Meta and Snap sent confidential letters and have not published their responses; TikTok and YouTube committed to no significant changes. Ofcom advised the Secretary of State that requiring highly effective age assurance to enforce minimum ages “would need a clearer basis in legislation”. ofcom.org.uk
- — Ofcom: Statement or letter, Facebook, Instagram, Roblox, Snapchat, TikTok, YouTube. Ofcom letters asking the six services to enforce their minimum ages with highly effective age assurance and to report back by 30 April 2026; Ofcom said it would report on the responses in May. ofcom.org.uk
- — Ofcom: Investigation opened, X Corp. (entry). Investigation into X over Grok imagery, including whether highly effective age assurance was used. ofcom.org.uk
Provisional decisions
- Cyberitic 3 September 2026
- ZD Media 3 September 2026
- Porntrex 29 September 2026 — Section 130 notice alleging a breach of section 12, with a provisional finding of failure to respond to an information request (section 102(8)); published 30 September 2026.
- Web Prime Inc 29 September 2026 — Section 130 notice alleging a breach of section 12, with a provisional finding of failure to respond to an information request (section 102(8)); published 30 September 2026.
Open Part 5 investigations without a decision
- Score Internet Group opened 9 May 2025
- XXBrits
- Sun Social Media
- hqporner
- Reply Buzzer opened 20 February 2026
- pimpbunny
- kemono.cr
- Bit Hive (eporner) opened 16 June 2026
Closed
- Trendio: Closed, no findings
- Duplanto: Closed, no findings
- Novi Ltd (joi.com): Closed 31 July 2026 after age assurance was implemented ofcom.org.uk
- First Time Videos LLC: Closed 30 September 2026 after the £80,000 penalty from the 18 June 2026 Confirmation Decision was paid; the provider blocked UK IP addresses and told Ofcom it will implement highly effective age assurance ofcom.org.uk
Register: Ofcom enforcement programme page.
Actions recorded on service entries
- — Pornhub, YouPorn, RedTube: Ofcom, investigation opened. Case CW/01358/09/26, published 23 September 2026. Ofcom is examining whether the age assurance process Aylo introduced on Pornhub in May 2026 is highly effective. The process relies on signals from Apple that UK iOS and iPadOS users may have completed Apple’s age checks. Ofcom says Aylo “may not have conducted sufficient due diligence and testing before implementing a new age assurance process”, that sections 12 and 36 are in scope, and that it “will not make a determination on how Apple operates its age checks”. An update will follow “in due course”.
- — TikTok: Ofcom, investigation opened. Section 12 investigation into compliance with duties to protect children, focused on the age-inference system. Ofcom’s page: case opened 16 July 2026; “We will provide an update on this investigation in October 2026.” Status Open as of 18 October 2026.
- — Facebook: Ofcom, statement or letter. Ofcom’s update on the responses to its 12 March letters: Meta “sent us a confidential letter” and “has not published its response”; Ofcom is “not currently convinced” that the commitments by Snapchat, Facebook, Instagram and TikTok “ensure they will effectively prevent children under 13 from accessing their sites and apps”. Ofcom notes Meta shared recently announced changes to identify and remove under-13 accounts on Facebook and Instagram using enhanced AI, and committed to new content settings for under-18 Facebook users in the UK.
- — Instagram: Ofcom, statement or letter. Ofcom’s update on the responses to its 12 March letters: Meta “sent us a confidential letter” and “has not published its response”; Ofcom is “not currently convinced” that the commitments by Snapchat, Facebook, Instagram and TikTok “ensure they will effectively prevent children under 13 from accessing their sites and apps”. Ofcom notes Meta shared recently announced changes to identify and remove under-13 accounts on Facebook and Instagram using enhanced AI.
- — 4chan: Ofcom, fine (£520,000). Confirmation decision under section 132: £450,000 for failing to use highly effective age assurance (section 12), £50,000 for failing to carry out a suitable and sufficient illegal content risk assessment (section 9(2)) and £20,000 for not specifying in its terms of service how individuals are protected from illegal content (section 10(5)); each with a 2 April 2026 compliance deadline and daily penalties of £500, £200 and £100 after it, running at most to 1 June 2026. Case closed on this date; the non-confidential decision was published on 21 April 2026.
- — Facebook: Ofcom, statement or letter. Ofcom letter of 12 March 2026 to Facebook, Instagram, Roblox, Snapchat, TikTok and YouTube: enforce minimum ages with highly effective age assurance and report back by 30 April 2026.
- — Instagram: Ofcom, statement or letter. Ofcom letter of 12 March 2026 to Facebook, Instagram, Roblox, Snapchat, TikTok and YouTube: enforce minimum ages with highly effective age assurance and report back by 30 April 2026.
- — Roblox: Ofcom, statement or letter. Ofcom letter of 12 March 2026 to Facebook, Instagram, Roblox, Snapchat, TikTok and YouTube: enforce minimum ages with highly effective age assurance and report back by 30 April 2026.
- — Snapchat: Ofcom, statement or letter. Ofcom letter of 12 March 2026 to Facebook, Instagram, Roblox, Snapchat, TikTok and YouTube: enforce minimum ages with highly effective age assurance and report back by 30 April 2026.
- — TikTok: Ofcom, statement or letter. Ofcom letter of 12 March 2026 to Facebook, Instagram, Roblox, Snapchat, TikTok and YouTube: enforce minimum ages with highly effective age assurance and report back by 30 April 2026.
- — YouTube: Ofcom, statement or letter. Ofcom letter of 12 March 2026 to Facebook, Instagram, Roblox, Snapchat, TikTok and YouTube: enforce minimum ages with highly effective age assurance and report back by 30 April 2026.
- — Reddit: ICO, fine (£14,470,000). No lawful basis for under-13 data, no DPIA before Jan 2025, self-declaration only until July 2025.
- — 4chan: Ofcom, provisional decision. Provisional notice of contravention covering the illegal content risk assessment duty, the terms of service duties and “its duty to protect children from encountering pornographic content through the use of highly effective age assurance”; 10 working days to make representations.
- — X and Grok: Ofcom, investigation opened. Investigation into X over Grok sexualised imagery, including highly effective age assurance.
- — 4chan: Ofcom, statement or letter. Scope expanded: Ofcom added whether 4chan “has failed, or is failing, to comply with its duties under section 12 of the Act” to use highly effective age verification or age estimation to prevent children encountering pornographic content.
- — 4chan: Ofcom, fine (£20,000). Confirmation decision: 4chan “has breached its duty under section 102(8)(a) of the Act to comply with a statutory request for information, on two separate occasions”; fixed penalty of £20,000 and a daily penalty of £100 for up to 60 days until the risk-assessment record and revenue information were provided. 4chan had until 13 November 2025 to pay.
- — 4chan: Ofcom, provisional decision. Provisional notice of contravention: reasonable grounds for believing 4chan contravened its duty under section 102(8) to comply with two requests for information.
- — 4chan: Ofcom, investigation opened. Investigation opened into whether 4chan failed to respond to a statutory information request (sent 14 April 2025 asking for its illegal content risk assessment), to complete and keep a record of that assessment, and to comply with the illegal content safety duties. Case reference CW/01307/06/25.
- — Replika: other, fine. Italian data protection authority (Garante): administrative fine of €5 million on Luka, Inc. and a compliance order. The authority found that until 2 February 2023 “the Company had not implemented any age verification mechanisms—either at registration or during use of the service—despite having declared that minors were excluded from potential users”, and that “the age verification system currently implemented by the controller continues to be deficient in several respects”. Reported by the European Data Protection Board (published 21 May 2025).
- — OnlyFans: Ofcom, fine (£1,050,000). Provider misreported the facial-estimation challenge age (20 vs 23) to Ofcom.