1,800% Surge in VPN Use as Internet Users Appear to Reject Online Safety Act
The UK’s Online Safety Act (OSA) is now in force, introducing sweeping new obligations for digital platforms to prevent under-18s from accessing harmful or age-restricted content. But just days after implementation, signs are emerging that efforts to protect young users may be undermined by the soaring use of VPNs.
According to Proton, the Swiss-based company behind one of the UK’s most-downloaded VPN apps, it experienced a “more than 1,800 per cent increase in daily sign-ups from UK-based users” following the rollout of the new age verification rules. Meanwhile, Nord reported a 1,000 per cent increase in UK VPN subscription purchases.
This spike in demand reflects public concerns — not just about access restrictions, but also about how privacy and identity are managed under the new regulations. Proton told the Telegraph: “This clearly shows that adults are concerned about the impact universal age verification laws will have on their privacy.”
The Challenge: Age Checks vs Workarounds
The Online Safety Act requires platforms to implement “highly effective” age assurance to block underage access to adult content, harmful forums, and social platforms. This includes material related to pornography, gambling, self-harm, eating disorders, and suicide.
Platforms like X, Reddit, and Discord have already introduced methods like facial age estimation, bank account verification, and ID uploads to meet the new compliance thresholds. However, as thousands of users turn to Virtual Private Networks (VPNs) — which can disguise a user's location by routing traffic through foreign servers — the act’s effectiveness is being tested.
“If platforms or sites signpost towards workarounds like VPNs, then that itself is a crime and will be tackled by these codes,” said Peter Kyle, the Technology Secretary.
VPNs remain legal in the UK, and the new law does not make it an offence to use one. However, platforms may be held accountable if they enable or ignore such circumvention methods, especially if underage users are able to bypass restrictions.
Serve Legal's Independent Audits for Real-World Compliance
In response to this shifting landscape, Serve Legal has expanded its trusted verification services to support online platforms in meeting OSA compliance.
Online Safety Act Audits
Serve Legal’s independent age assurance audits simulate real-life user journeys using trained mystery shoppers aged 13+, providing platforms with evidence-based insight into how effectively they’re protecting underage users.
We test age gates and self-declaration forms, biometric and facial recognition tools, photo ID and banking verification, third-party age assurance providers, as well as weaknesses and bypass opportunities.
Who Needs an Audit? If your online platform:
- Hosts user-generated content
- Has forums, chat, or social sharing features
- Is accessible or attractive to under-18s
- Relies on any form of age verification
…you are likely subject to the Online Safety Act — and at risk of non-compliance.
Failure to comply could result in fines of up to £18 million or 10% of global turnover, enforced by Ofcom, the appointed online safety regulator.
Protect Your Platform, Protect Young Users
Don’t wait for enforcement to discover where your systems fall short.
Whether you’re unsure where to start or ready to test your platform, we’re here to help. Contact our team to book a tailored Online Safety Act Audit or to discuss your compliance needs.
Contact Serve Legal to book a tailored audit or speak to our expert team about your compliance strategy.
