Every time a lawmaker somewhere tightens the rules on who can access adult content, a small cluster of identity-verification companies gets a little richer. That’s not a cynical aside — it’s the plain read of the last year’s financial results from the firms that actually run the age checks behind platforms like OnlyFans. Age verification has quietly become a business worth hundreds of millions of dollars a year, and understanding who runs it — and how — matters for any creator whose livelihood now depends on passing through one of these systems before they can work.
The numbers behind the boom
Three companies illustrate the scale of the shift:
- Socure, a Nevada-based identity verification firm founded in 2012, reported annual recurring revenue past $340 million this year, up 62% year-on-year in new ARR, on total funding raised of around $646 million. It now serves more than 3,000 customers spanning gaming, social platforms and adult sites.
- Yoti, the London-based firm whose age-checking tools UK creators are likely to have encountered directly, has now completed more than one billion age checks covering roughly 500 million people, and reported 62% revenue growth in 2025, taking annual revenue to around $43 million for the year to March 2026.
- Persona, based in San Francisco, was valued at $2 billion in an April 2025 funding round on roughly $418 million raised to date, with annual recurring revenue passing $100 million in 2025. Its client list includes Roblox and OpenAI alongside adult platforms.
None of these companies exist solely to serve the creator economy — Persona’s biggest clients are in gaming and mainstream social media. But adult platforms are a meaningful and growing slice of demand, and it’s demand created almost entirely by regulation rather than organic customer choice.
Where the pressure is coming from
The compliance boom has several legislative sources hitting at once. In the UK, Ofcom’s enforcement of the Online Safety Act has already produced a £630,000 fine against one adult platform for failing to run “highly effective age assurance,” and the regulator’s own reporting shows 69 million age checks carried out in six months across regulated UK services. In the EU, the Digital Services Act sets its own 31 December 2026 deadline for member states to have age verification live. In the US, a growing list of individual states have passed their own age-verification statutes for adult sites, each with different technical requirements, on top of federal moves like the TAKE IT DOWN Act’s new takedown obligations. Every one of these rules needs a vendor behind it, and platforms — including OnlyFans — have limited appetite to build that infrastructure themselves when specialist firms already do it at scale.
What it actually means if you’re verifying on OnlyFans
For creators, this shift has practical, everyday consequences beyond the headline regulatory story:
- More frequent re-verification. Platforms under regulatory pressure are moving away from one-off ID checks at sign-up towards recurring “liveness” checks — proving in real time, via camera, that you are who your documents say you are, rather than a static photo.
- More biometric data in circulation. Facial recognition and liveness detection mean a growing number of third-party companies are processing your face and government ID, not just the platform itself. It’s worth knowing, and asking, which vendor a platform uses and what its data retention policy says.
- Costs that eventually flow downhill. Verification is not free for platforms to run, and in a competitive subscription market, compliance costs tend to show up eventually in platform fees or reduced margins rather than being absorbed indefinitely.
Questions worth asking before you verify
- Which named vendor handles verification, and can you find their own privacy policy independently of the platform’s?
- How long is your ID document and biometric data retained, and is it deleted after verification or kept on file?
- Does the vendor operate under a recognised standard (in the UK, look for accreditation under the Age Verification Providers Association or similar) rather than a bespoke, unaudited process?
This article is for information only and does not constitute legal or data-protection advice. If you have specific concerns about how your identity documents or biometric data are being stored, consider seeking independent advice or contacting your national data protection regulator.
