Microsoft is set to introduce age verification measures on its Xbox and Microsoft Store platforms in Australia from August 2026, prompting privacy and security debates as tech firms adapt to evolving regulations.
Microsoft has started preparing Australian users for age checks on its Xbox and Microsoft Store platforms, as the country moves to tighten access to games and apps rated 18+. The company said users may be asked to confirm their age before buying or opening adult-rated content from August 2026, reflecting a broader shift in how platforms are being forced to handle age-gated material online. Microsoft says the checks can be completed through email confirmation, a facial-age estimate using a secure selfie, a credit card or a government-issued document such as a driving licence or passport.
The process is being run by VerifyMy, a London-based verification provider, and Microsoft says it is available in Australia through its account settings. The company’s support guidance also makes clear that the list of countries where these checks are used will continue to change as local laws evolve. That places Microsoft among a growing number of technology firms adapting their services to local age-verification rules, even as the rollout remains uneven across the industry.
The move comes at a time when age-verification systems are drawing intense scrutiny over privacy and security. In February, researchers reported that Persona, a widely used verification vendor linked to services including Discord, had left a testing environment exposed, raising questions about how much data such systems collect beyond simple age confirmation. Persona said the environment was isolated and that no personal data was exposed, but the incident added to wider concerns that these tools may create more data-handling risk than many users realise.
Those concerns have deepened after a series of breaches involving verification systems. In September 2025, a cyberattack on a third-party provider used by Discord exposed personal data from around 70,000 users, and later reporting said government-issued identity documents were compromised in the same wider episode. Discord subsequently delayed its broader age-verification rollout and said it had ended its work with Persona. Around the same period, Twitch took a different approach, requiring new affiliates to use Persona for identity checks before payouts, underscoring how unevenly major platforms are responding to the same regulatory pressure. Steam and Sony, by contrast, have not yet adopted similarly strict age checks in Australia, leaving open the possibility that the government could still raise the bar further.
Disclaimer: This content is intended for informational purposes only. Readers are advised to exercise their own judgement, conduct due diligence, or consult a qualified expert before acting on any information provided.
