According to Discord, starting in June users wanting to switch their account to adult status will have to choose between a facial scan for age estimation or uploading an ID document. In addition, an AI model will automatically assess in the background whether the user is an adult; based on existing account age, device, and activity data.

What sounds like more security for young people is massively criticized by privacy activists around the world. The problem is that by requiring users to register with their face or ID, the identity of these users are given to tech companies, without anyone able to check what happens with this data – except for reading and trusting these company’s privacy policy statements.

What’s more, Discord is introducing these check voluntarily, despite a recent data breach. In December, 2025, Discord published a statement announcing that government-ID photos of 70,000 users have been breached via the third party service provider 5CA which was used to review age-related appeals. Because of that, the original announcement on Feb 9, 2026, to roll out age verification globally has seen an immense backlash. One could say, the Internet was freaking out - and rightly so! According to Discord’s new announcement age checks will now be rolled out starting in June 2026, and the company promises that about 90% of users will never have to verify their age.

But why are the age verification plans by Discord criticized?

Schalte die Privatsphäre ein.

Get

Biometric age verification: A dangerous precedent

In practice, age verification means face scan, ID uploads, and/or AI analysis of usage behavior. Even though Discord emphasizes that facial scans are processed locally on the device and ID data is deleted immediately, the fundamental problem remains: Anyone who wants to use social platforms must disclose biometric or highly sensitive identity data.

This is an unprecedented change to how we use the internet. Anonymous or pseudonymous communication is effectively being undermined.

The partnership with identity service provider Persona was viewed particularly critically. Discord tested an integration of the company in the UK. After massive user protests, Discord distanced itself from it again. According to reports, data could be processed via third-party databases and public sources as part of this test.

Discord now refers instead to the provider k-ID, which is supposed to evaluate face scans locally and collaborate with a company called Veratad on ID checks. In addition, Discord will give users a choice as to which company to use for ID check, and give a detailed statement on how the personal data is being used and stored.

But regardless of the service provider, the key question remains: Do we want a digital world where we have to show our face or ID in order to communicate?

Age verification as a global trend

Discord is not an isolated case. Governments around the world are targeting social media, and we give an overview of countries requiring age verification here:

• In Australia, a comprehensive social media ban for under-16s has been in place since December.
• The UK is considering similar measures.
• Denmark, and Norway are discussing minimum ages or restrictions.
• The EU Council has come out in favor of an EU-wide minimum age of 16 for social media.

Political pressure is mounting. Platforms are responding; often with technical solutions that deeply infringe on privacy.

Schalte die Privatsphäre ein.

Get

Why age verification is problematic

1. Biometric data cannot be “reset”: A password can be changed. A face cannot. Facial data is among the most sensitive personal information there is.
2. Centralization of identity data: The more platforms require proof of age, the more sensitive identity data is bundled with third-party providers which becomes an attractive target for data leaks and government access.
3. Chilling effect on free communication: When every interaction is potentially linked to an identity check, it changes user behavior. Yet, anonymity is a cornerstone of free speech.
4. Age verification does not solve the real problems: Protecting minors is important – but surveillance is not a sustainable solution. Media literacy, parental supervision, and transparent platform rules should be prioritized over widespread biometric data collection.

How users deal with Discord’s age verification

According to Discord, the “vast majority” of users do not need to actively verify their age, at least as long as they do not want to access age-restricted content or change certain settings. Those who avoid these areas will in many cases not need to provide ID or a face scan.

Since Discord uses an AI model that also takes device and activity data into account, it is worth doing the following steps in the Discord app to protect one’s privacy:

• Restrict tracking
• Minimize app permissions

When having to use identity services, do read the statement on data usage to learn what data is collected, how long is it stored for, who is the provider and can it be trusted, what privacy policy applies. This information helps you pick the ID check provider that you feel most comfortable with – even if you’ll be never 100% safe that the data will not be misused or leaked, but at least you’ll know about the risks.

Alternatively, you can use other communication channels. If you want to communicate more anonymously, you should prefer platforms that offer end-to-end encryption and do not require identity verification. Also look out for the principle of data minimization on which many privacy-first providers like Tuta Mail focus.

Digital sovereignty instead of digital ID requirements

Developments surrounding Discord reveal a worrying trend: Access to digital communication is increasingly linked to proof of identity.

But secure communication should not depend on revealing biometric data. Data protection is crucial in today’s internet, even more so when we hear of data breaches, leaks, phishing attacks and more.

In Europe with its great GDPR legislation in particular, we should focus on protecting users privacy rather than undermining it via ID check for age verification.

Privacy is a fundamental right, and politicians must start treating it as such.

Age verification may be well-intentioned. But if it becomes widespread identity verification, it jeopardizes precisely what has made the internet great: free, open, and accessible to everyone.