When It Is Required
Age verification is required by law in the UK for certain product categories. The main categories for ecommerce are: alcohol (over 18 under the Licensing Act 2003), tobacco and nicotine products (over 18), vaping products (over 18 under the Tobacco and Related Products Regulations 2016), knives (over 18 under the Offensive Weapons Act 2019), and some adult content.
The Online Safety Act 2023 introduced stronger age verification requirements for services hosting pornographic content, enforced by Ofcom.
UK Legal Requirements
For alcohol, HMRC and the Portman Group's Code of Practice require that you take reasonable steps to verify age before completing a sale. A simple date-of-birth form does not constitute effective age verification.
The most compliant approach for alcohol and nicotine products is delivery-point age verification: couriers check ID on delivery. This is the standard used by major UK alcohol retailers. It must be clearly communicated at checkout.
App Options
Shopify age verification apps include AgeVerify, Hulk Age Verification, and AAAge Verify. These typically implement a popup or splash page requiring users to confirm they are 18 or over.
For more robust verification, third-party age verification services like AgeID and Yoti offer digital ID checking that cross-references government databases. These are significantly more expensive but provide much stronger compliance evidence.
Implementation Methods
The most common implementation is a pop-up on the homepage (or specific product/collection pages) requiring the visitor to confirm their age by clicking a button or entering a date of birth. This is a "soft" verification: it stops honest underage users but does not prevent someone from lying.
For products where a stronger standard is legally required, integrate with a digital age verification provider. These services require the customer to submit a photo ID which is checked against government records.
Limitations
Date-of-birth form verification is widely acknowledged as ineffective: anyone can enter a false date. It provides minimal legal protection. HMRC and trading standards expect more than a checkbox for regulated products.
Be honest about what level of verification your legal obligations require. For alcohol, delivery-point ID checks combined with a checkout declaration are the practical standard for most online retailers.
Compliance Documentation
Document your age verification procedures in writing. This includes which products require verification, what method is used, how failures are handled (e.g., what happens if a customer fails delivery-point age check), and how you train staff.
Retain records of verification checks for auditable products. In the event of a trading standards investigation, documented procedures and records are your primary defence.
