Ofcom Investigates Aylo Over Pornhub's Age Verification in UK

The U.K.'s online safety regulator, Ofcom, has initiated an investigation into Aylo, the parent company of Pornhub, regarding its use of device-based age verification for U.K. users. The probe will assess whether Aylo's age assurance process, which relies on Apple's age checks, complies with the U.K.'s Online Safety Act (OSA).

Investigation Details

Ofcom announced its investigation on September 23, 2026, stating concerns that Aylo "may not have conducted sufficient due diligence and testing before implementing its new age assurance process." The regulator further noted that, as a result, Aylo's process "may not be highly effective at preventing children from seeing pornography." Under the OSA, service providers are responsible for ensuring their age assurance processes are highly effective, regardless of when an age check occurs.

The investigation will examine how Aylo implemented its age assurance process and whether it conducted the necessary due diligence prior to deployment. Ofcom clarified that its investigation will not focus on how Apple operates its age checks. The OSA, which came into effect in July 2025, mandates that all sites and apps hosting pornography must have age checks to prevent children from accessing adult content.

George Lusty, Ofcom's Director of Enforcement, stated that "Online age checks are a vital protection to prevent children from encountering inappropriate or harmful material, including pornography." He added that "We expect tech firms to ensure age checks are highly effective before introducing them. Anything less could leave children at risk."

Aylo's Age Verification Approach

In May 2026, Aylo restored access to its free video-sharing platforms for U.K. users on Apple devices who had confirmed their age through Apple’s U.K. age-verification process. This followed a period starting in February 2026 when Aylo blocked access for unregistered U.K. users, citing what it considered the OSA’s "flawed system." Aylo had previously introduced age assurance methods that met government rules under the OSA.

With the launch of iOS 26.4, Apple began implementing account-level age verification for users in the U.K. At that time, Aylo described Apple’s move as "one of the strongest and hardest to circumvent protections currently available for helping prevent minors from accessing age-inappropriate content." The company also expressed hope that the effectiveness of Apple’s device-based age verification solution would lead to a global rollout across other operating systems internationally.

Alex Kekesi, Aylo’s VP Brand and Community, stated that Aylo will cooperate fully with the investigation. Kekesi defended the company’s use of Apple age assurance, saying, "We are committed to working constructively with Ofcom and Apple in our shared commitment to child protection." Kekesi added, "We trust that the investigation will show Apple’s U.K. device-level age-verification update, which renders devices operating since iOS26.4 kid safe by default, offers one of the strongest and hardest to circumvent protections currently available for helping prevent minors from accessing age-inappropriate content."

Kekesi reiterated Aylo’s belief that Apple’s implementation represents "a pioneering approach for child safety that provides significantly stronger protection than any other age assurance method currently available in the U.K. market." Kekesi also noted, "The internet is global and it's impossible to patrol millions of different sites based in hundreds of different countries. Site-based regulation is always going to encourage evasion."

Regulatory Context and Requirements

Ofcom's initial assessment highlighted that Pornhub deployed its new age assurance process for some users in May 2026. This process relies on signals from a third party, Apple, indicating that U.K. users attempting to access Pornhub may have completed Apple’s age checks. The Online Safety Act clearly states that the service provider is responsible for ensuring the high effectiveness of any age assurance process.

Providers are also required to conduct a suitable and sufficient assessment of whether their service is likely to be accessed by children. This assessment must be performed before making any significant changes to the design or operation of their service, or in response to evidence suggesting reduced effectiveness of age checks. Ofcom's concern is that Aylo may not have met these requirements regarding due diligence and testing before implementing its new process.

Key Facts

• Ofcom launched an investigation into Aylo, Pornhub's parent company, on September 23, 2026.
• The investigation focuses on Aylo's use of Apple's device-based age checks for U.K. users.
• Ofcom is concerned Aylo may not have conducted sufficient due diligence and testing for its new age assurance process.
• The U.K.'s Online Safety Act requires highly effective age assurance for sites hosting pornographic material.
• Aylo's VP Brand and Community, Alex Kekesi, stated the company will cooperate and defended Apple's system as providing strong protection.
• Ofcom will not investigate how Apple operates its age checks.