How credit-card age verification works
A credit card can provide evidence that its holder is an adult. Using it to verify age is a separate step from paying for a purchase.
eBay example: its bladed-product check accepts a credit card, excludes debit cards, and says the verification card is neither charged nor saved. Read the eBay record for the separate VerifyMyAge route and delivery checks. eBay help · checked 13 September 2026.
Compare service-specific statements · Why a check is requested · Retention explained
What it collects
A credit-card age check uses a card that can only be held by an adult as evidence of age. Verification and payment are separate purposes: a service may use one card to check age and another payment method for the purchase.
Debit cards can be available to under-18s. eBay explicitly excludes them from its bladed-product credit-card route. Charges and storage depend on the particular service; do not assume one service’s policy applies elsewhere.
What Ofcom says
Listed in Ofcom's January 2025 guidance as capable of being highly effective, provided the card is one that can only be held by an adult. Payment methods that are not restricted to over-18s are not capable. Ofcom
Listed as capable of being highly effective Offered by about 34% of the services in Ofcom's July 2026 sample (read from the report's chart; approximate).
Services with a recorded route
| Service | Provider | Verification and payment | Charge for the check | Retention, as published |
|---|---|---|---|---|
| Apple devices | Apple | Payment use not recorded in this comparison. Check the service’s own route. | Charge statement not recorded here. |
“your credit card isn’t stored” Quoted from support.apple.com, dated 18 September 2026; checked 18 October 2026. Held by the service. Period as stated: When not added as a payment method. Debit and gift cards are excluded. Card storage is optional when adding it as a payment method. |
| Bluesky | Epic Kids Web Services | Payment use not recorded in this comparison. Check the service’s own route. | Charge statement not recorded here. |
No published retention period found (checked 18 October 2026). Bluesky’s post names “credit card verification and face scans” through Epic Games’ Kids Web Services and gives no retention line. KWS’s own developer page: “Stripe (stripe.com) verifies credit card details.” and, for the UK, “KWS authorizes a £0.05 charge” that is not withdrawn. Debit cards are listed as unavailable in the United Kingdom. |
| Discord | k-ID (Stripe) | Payment use not recorded in this comparison. Check the service’s own route. | Charge statement not recorded here. |
“Your card details are processed through k-ID who uses Stripe’s secure payment infrastructure. Discord only receives your age group or a note that the result was inconclusive. We never see your card details.” Quoted from support.discord.com, dated 24 September 2026; checked 18 October 2026. Held by the vendor. Period as stated: Card details not seen by Discord; Stripe keeps limited financial records. Discord’s page: “What’s actually available to you depends on factors such as your region or device, so the options below may not be the same for everyone.” Discord’s page: “A small temporary charge (under $0.50 USD) may be placed to confirm your card is valid and will be fully refunded within 14 business days. Stripe retains limited financial records, as required by financial regulations, but this information isn’t shared with Discord.” Only credit cards are accepted; debit and prepaid cards are not eligible. |
| eBay | eBay credit-card route | Age verification for a bladed-product purchase. The purchase can be paid with another method after verification. | No charge for this check. Source · checked 18 October 2026 |
“The card will only be used for verification and will not be charged or saved.” Quoted from ocs.ebay.co.uk; checked 18 October 2026. Held by the service. Period as stated: card not saved for this check. This statement covers the bladed-product credit-card check only. |
| Epic Games and Fortnite | Epic Kids Web Services (Stripe) | Proof that a parent or guardian is an adult, or age verification of an account holder, through Epic’s Kids Web Services Credit card; KWS’s page: “KWS authorizes a small charge in the local currency but does not withdraw the money from their credit card” | £0.05 authorisation in the United Kingdom, not withdrawn (KWS’s page); Epic’s FAQ: “an authorization or small refundable charge” Source · checked 18 October 2026 |
“the method of verification used, e.g. ‘individual verified by payment card using Stripe’, but we never store the verification details (e.g. your card details) themselves” Quoted from kidswebservices.com, dated 10 September 2026; checked 18 October 2026. Held by the vendor. Period as stated: Card details not stored by KWS; verified status kept against a hashed email address. Credit cards only in the UK; KWS’s page lists debit-card verification as unavailable in the United Kingdom. Epic’s Parental Verification FAQ: “placing an authorization or small refundable charge on a credit card”. Kids Web Services’ developer page: “Stripe (stripe.com) verifies credit card details.” and “For users outside the United States, KWS authorizes a small charge in the local currency but does not withdraw the money from their credit card. For example, KWS authorizes a £0.05 charge for users in the United Kingdom.” Debit cards: “Worldwide except in Belarus, Cuba, Iran, North Korea, Russia, Syria, Ukraine, and the United Kingdom.” |
| Google Account and Google Search | Age verification. Google’s page: the pending authorization “happens so Google can make sure the card is valid” and lets Google “Confirm you're old enough to access certain content, features, or services.” Credit card; a pending authorization that “may stay in your account for 1 to 14 business days depending on your bank” | None. Google’s page: “This is an authorization request, and not a charge. You don't pay for an authorization.” Source · checked 18 October 2026 |
“If you enter your credit card info for age verification, Google will retain this data as necessary to meet legal and regulatory requirements.” Quoted from support.google.com; checked 18 October 2026. Held by the service. Period as stated: Retained “as necessary to meet legal and regulatory requirements”. Google’s page: “You won’t be charged to verify your age.” “This authorization happens so Google can make sure the card is valid.” “An authorization may stay in your account for 1 to 14 business days depending on your bank.” | |
| Kick | k-ID | Payment use not recorded in this comparison. Check the service’s own route. | Charge statement not recorded here. |
“k-ID does not receive or save your card details, and you will not need to pay to verify that you are an adult.” Quoted from help.kick.com, dated 21 May 2026; checked 18 October 2026. Held by the vendor. Period as stated: Not stored after validation. Availability varies by jurisdiction; the recorded FAQ does not confirm which methods UK viewers receive. Card details are processed by Stripe. Kick's FAQ: “neither k-ID nor Stripe stores this information after it is validated.” A small charge may appear and is refunded within 1 to 14 business days. |
| Pornhub, YouPorn, RedTube | Aylo | Payment use not recorded in this comparison. Check the service’s own route. | Charge statement not recorded here. |
No published retention period found (checked 18 October 2026). |
| Riot Games | Kids Web Services (KWS) | Payment use not recorded in this comparison. Check the service’s own route. | Charge statement not recorded here. |
“the method of verification used, e.g. ‘individual verified by payment card using Stripe’, but we never store the verification details (e.g. your card details) themselves” Quoted from kidswebservices.com, dated 10 September 2026; checked 18 October 2026. Held by the vendor. Period as stated: Card details not stored by KWS; verified status kept against a hashed email address. Riot: adult verification is required “in some regions”; the regions are not listed and the UK is not named. Riot: “To prove that you are an adult, you must submit information like a credit card or government ID that will be processed through Kids Web Services (KWS), a third-party service.” Riot’s page does not state whether a charge or authorisation is made. The retention quotation is from KWS’s own privacy policy, not a Riot page. |
| Steam | Valve (in-house) | Payment use not recorded in this comparison. Check the service’s own route. | Charge statement not recorded here. |
No published retention period found (checked 18 October 2026). Valve’s own support page: “Your UK Steam user account is considered age verified for as long as a valid credit card is stored on the account.”, “Unfortunately, debit cards do not qualify for age assurance purposes as these can be issued to minors.” and “Valve handles the verification process using its own internal payment processing system, which is independently certified under the PCI-DSS standard.” For some cards a £1 authorisation shows that Steam does not collect. The page publishes no retention period; the card stays stored on the account as a payment method. |
| Xbox | Yoti (attribution from the September 2026 record, not confirmed by Microsoft) | Payment use not recorded in this comparison. Check the service’s own route. | Charge statement not recorded here. |
No published retention period found (checked 18 October 2026). Not listed on Microsoft’s current age-assurance FAQ (24 August 2026); the July 2025 announcement is the only source for this method. Listed in the July 2025 Xbox Wire announcement (“mobile provider check, and credit card check”). Microsoft’s age-assurance FAQ dated 24 August 2026 (read 18 October 2026) lists only facial age estimation, document upload and a government-system login for Singapore; it does not list this method. The Xbox Wire page names no vendor. |
| YouTube | Payment use not recorded in this comparison. Check the service’s own route. | Charge statement not recorded here. |
“If you enter your credit card info for age verification, Google will retain this data as necessary to meet legal and regulatory requirements.” Quoted from support.google.com; checked 18 October 2026. Held by the service. Period as stated: retained for legal requirements. Google’s page: “You won’t be charged to verify your age.” and “This is an authorization request, and not a charge.” |