A sweeping new online age verification law in the United Kingdom is pushing large numbers of internet users toward virtual private networks, with Proton VPN reporting an hourly signup increase of 1,400 percent above its baseline on Friday, July 25. The spike coincides with the moment the UK's Online Safety Act began to be enforced, requiring platforms hosting explicit content to confirm the age of visitors through methods such as facial recognition scans or banking verification.
The law, overseen by communications regulator Ofcom, applies broadly. It touches not only dedicated adult sites but also dating platforms such as Tinder and Hinge, which fall under the same compliance requirements because of the nature of content they can host. The stated goal is straightforward: keep minors away from explicit material. The practical fallout, however, has been a rush of adults seeking ways to preserve their privacy while continuing to access legal content.
A Pattern Already Visible in France
This is not the first time such a law has reshaped VPN demand. In June, Proton VPN recorded a 1,000 percent jump in new subscribers after Pornhub withdrew from France, its second-largest market, rather than comply with that country's own age verification mandate. Weeks later, Pornhub's parent company, Aylo, confirmed to Mashable that it would take a different approach in the UK and comply with the Online Safety Act rather than withdraw service there.
What distinguishes the UK surge, according to a Proton VPN spokesperson, is its persistence. The company said signups jumped immediately at midnight British Summer Time when enforcement began, rose again around 9 a.m., and are expected to keep climbing through the weekend. Unlike the shorter-lived spike tied to the French market exit, this one has sustained itself, a pattern the company has compared in scale to the kind of surges typically associated with major civil unrest rather than routine regulatory shifts.
How VPNs Undercut Age Verification
The mechanics explain why. A VPN routes a user's internet traffic through an encrypted tunnel to a server operated by the VPN provider before that traffic reaches the open web. This masks the user's real IP address and, by extension, their apparent location. Connect to a server in another country, and a site will see traffic arriving from that country, not from the UK.
That location-spoofing side effect, while not the core design purpose of VPN technology, is precisely why these tools blunt the force of geographically bound age verification laws. A regulation written to apply within UK borders has limited power once a user appears to be browsing from somewhere else entirely. Early research into age verification enforcement, both in the UK and in other jurisdictions experimenting with similar rules, has already flagged this as a structural weakness, separate from the free expression and data privacy concerns the laws also raise.
What the Trend Signals
Public interest data backs up the subscriber numbers. Search attention around Proton VPN in the UK spiked sharply in the early hours of Friday morning, right as enforcement began, a pattern the company noted was clearly tied to the law rather than any unrelated event.
The broader implication is one that regulators will have to reckon with repeatedly as more jurisdictions adopt age verification mandates: privacy tools built for encryption, security, and circumventing censorship can just as easily serve as a workaround for identity checks. Proton VPN, founded in 2017 and now operating more than 13,700 servers across over 120 countries, is simply the most visible beneficiary of a dynamic that is likely to repeat itself wherever similar laws take effect.
