Epic Games Store Age Checks Australia: 4 vs 1 [2026]

Epic Games Store switched on mandatory age verification for R18+ games in Australia on September 9, 2026, giving players four separate ways to prove they are adults. That is three more options than Valve gave Steam users a day earlier, when the world’s largest PC game storefront started demanding a linked credit card as the only accepted proof of age. The gap between the two rollouts has turned a routine regional compliance update into a live case study on how differently two dominant game platforms can interpret the same law.

Both companies are reacting to the same regulatory pressure: Australia’s expanding age-assurance rules for R18+ classified content, enforced through direct compliance notices to platform operators. But the design choices Epic and Valve made in the same week show how much room storefronts still have to interpret “age verification” in wildly different ways, with wildly different consequences for the millions of adults who play games in Australia.

Google · Preferred Sources

Don't miss new tech stories on Google

Add Tech Insider once in the Google app and our stories appear in your news suggestions.

Add Now

What Changed: Epic Games Store Age Checks Go Live in Australia

Epic Games published its rollout notice on September 8, 2026, and the requirement took effect the next day. The company’s official account posted the change directly to players: due to local regulations, players in Australia would need to verify they are 18 or older to get or buy R18+ games on the Epic Games Store, starting September 9, and the change would not affect games already owned or anything rated below R18+ (Epic Games Store, official X account).

That distinction matters. Epic’s age gate only triggers at the point of download or purchase for titles that carry Australia’s R18+ classification, the country’s highest legal rating for interactive entertainment. Games rated MA15+ or lower are untouched, and players who already own an R18+ title keep access to it without re-verifying. The scope is narrow by design, according to Epic’s own framing of the change, which repeatedly stresses that this is a purchase-gate, not a library-wide lockout (ID Tech Wire).

The trigger for both companies is the same: Australian regulators have been pushing platforms toward concrete age-assurance mechanisms for R18+ content since at least early 2026, when public broadcaster reporting flagged the coming requirement for online gaming platforms to implement some form of age check before granting access to R18+ titles (ABC News Australia). What has followed is a scramble by every major storefront to decide exactly what “some form of age assurance” means in practice.

The Four Verification Methods Epic Rolled Out

Epic built its system on top of Kids Web Services, the age-assurance infrastructure it already operates across its games and platforms, and plugged in three outside identity vendors for the Australian rollout, with a fourth arriving later in September. The four paths are functionally different enough that most adult players will find at least one that does not require handing over a government ID.

  • Facial age estimation through Yoti, where a user takes a selfie and Yoti’s estimation model judges whether they appear to be 18 or older, deleting the biometric image immediately after the check.
  • Credit card authorization through Stripe, which places a five-Australian-cent charge on a card as evidence of adult status rather than as a real transaction, then reverses it.
  • Government ID scan through Veriff, which checks a photographed ID document and, per Epic’s stated policy, deletes the document image immediately after verification.
  • Bank-based verification through ConnectID, Australia’s digital identity exchange, which lets a player confirm their age via their existing bank relationship without sharing ID documents directly with Epic. This fourth method is scheduled to arrive later in September 2026, after the initial launch.

Three of Epic’s four paths do not require a credit card at all, which is the detail that separates this rollout from Steam’s. A player without a credit card, or without one attached to their Epic account, can still clear the check with a selfie or an ID scan. That flexibility does not eliminate the privacy trade-offs of biometric or document-based verification, but it does mean Epic’s gate is not effectively a wealth or banking-access test in the way Steam’s currently is.

How This Compares to Steam’s Credit-Card-Only Gate

Steam’s version of the same compliance push, which tech-insider.org covered in detail when it went live on September 9, 2026, recognizes exactly one form of proof: an active Australian credit card linked to the account. Debit cards do not work. PayPal does not work. Prepaid and virtual cards are not accepted. If the card is later removed from the account, the verification lapses and access to R18+ titles is blocked again, including titles the player already owns and has been playing for years (ID Tech Wire).

That single-method design runs into a basic math problem. Reserve Bank of Australia payment-behavior data cited in coverage of the rollout puts credit card ownership among Australian adults at roughly a third to half of the adult population, well short of universal. Practically, that means a majority of legal adult players in Australia do not have the one item Valve’s system accepts as proof of adulthood, a gap that has nothing to do with whether they are actually 18 or older.

Epic’s multi-method approach sidesteps that specific failure mode, though it introduces its own set of trade-offs around biometric data collection and document handling that a card-only system avoids entirely. Neither approach is without cost to the player; they are simply different costs.

Data Table: Epic Games Store vs Steam Age Verification

FeatureEpic Games StoreSteam
Enforcement dateSeptember 9, 2026September 9, 2026
Verification methods offered4 (selfie, card, ID, bank)1 (credit card)
Accepts debit cardsNot applicable (card is one of four options)No
Accepts government ID scanYes, via VeriffNo
Accepts facial age estimationYes, via YotiNo
Accepts bank-based ID exchangeYes, via ConnectID (rolling out later in September)No
Blocks existing library access if unverifiedNo, only new downloads and purchasesYes
ScopeR18+ classified titles only18+ rated titles only

Why Australia, and Why Now: The Regulatory Background

Australia has spent the better part of 2026 tightening the screws on how digital platforms handle content aimed at adults. The country’s classification system already treats R18+ as a hard legal line for games, distinct from the MA15+ rating that carries no formal purchase restriction. What changed this year is enforcement: regulators moved from guidance toward direct compliance notices sent to platform operators, with real financial exposure attached for non-compliance.

Epic’s own justification for the change is explicit about this dynamic, framing the new gate as something done in order to adhere to local laws rather than a voluntary product decision (ID Tech Wire). That phrasing matters for how the industry reads this moment: platforms are not competing on age verification because they want to, they are converging on it because the alternative is regulatory and financial risk in one of gaming’s larger English-speaking markets.

Australia’s approach also sits inside a broader, global pattern. The UK’s Online Safety Act, the EU’s ongoing digital-services enforcement, and a wave of US state-level age-verification laws have all pushed platforms toward some version of the same mechanism over the past two years. Australia is simply moving first and fastest in the games space specifically, which is why its rollout is being watched as a preview of what other regions will eventually demand from Steam, Epic Games Store, PlayStation Store, and Xbox Store alike.

Which Games and Players Are Affected

Epic’s Purchase-Only Gate

The scope on both storefronts is narrower than a blanket age wall might suggest, but the practical effect diverges sharply depending on which platform a player uses. On Epic Games Store, only titles carrying Australia’s R18+ classification trigger the check, and only at the moment of download or purchase. A player’s existing library, including previously purchased R18+ titles, remains playable without additional verification.

Steam’s Account-Level Gate

Steam’s version reaches further. Because Valve’s system checks for a linked credit card as an account-level condition rather than a one-time purchase gate, it can cut off access to R18+ titles a player already owns if the linked card is removed or expires without replacement. That means Steam’s rollout has the potential to disrupt long-standing libraries in a way Epic’s narrower, purchase-only gate does not.

Neither platform’s system affects players outside Australia. Both companies have limited the requirement to accounts with an Australian billing address or region setting, consistent with how digital storefronts have historically handled other region-specific compliance requirements such as loot box disclosure labels or region-locked pricing.

Market Impact: What This Means for Publishers and Storefronts

For publishers with R18+ titles in their Australian catalog, the immediate effect is friction at the point of sale rather than a change to the classification itself. A harder age gate at checkout typically means some percentage of impulse buys and gift purchases fail to complete, particularly on platforms where the only accepted method is a specific payment instrument the buyer does not have on hand. Steam’s design is more exposed to this effect than Epic’s, precisely because it offers no fallback path for a player who lacks a credit card but can prove their age another way.

There is also a competitive angle. Epic has spent years trying to pull PC gamers away from Steam’s dominant market position, and Steam still commands the large majority of PC digital game sales despite Epic’s exclusivity deals and store-credit incentives. A more accommodating age-verification system will not by itself shift market share, but it removes one more point of friction for adult Australian players specifically, at a moment when Steam’s own system is generating negative press over its exclusion of the majority of local credit card non-holders.

For identity-verification vendors, this is a visible proof point. Yoti, Stripe, and Veriff all now have a live, high-profile integration with one of the largest PC game storefronts in the world, in a market regulators are watching closely. Expect all three companies to cite the Epic Games Store rollout in sales materials aimed at other platforms facing similar compliance deadlines in different jurisdictions.

Historical Context: How Age Verification Reached Gaming Platforms

Age-restricted game sales are not new; retail stores in most countries have enforced ratings-based ID checks for physical R18+ purchases for decades, generally through a simple visual ID check at checkout. What is new is doing the equivalent check for a digital storefront, where there is no cashier to glance at a driver’s license and wave a customer through.

The first widely visible version of this problem on PC storefronts was age-gating for mature content warnings, a self-declared checkbox system that required nothing more than clicking a birth-year dropdown. That approach has been criticized for years as effectively meaningless, since it relies entirely on the honesty of a user who has every incentive to lie. Australia’s 2026 enforcement wave is the first time a major market has forced PC storefronts to replace that checkbox with something that actually attempts to verify the claim, using real identity infrastructure instead of an honor system.

Console storefronts have generally relied on a different model, tying purchases to a payment method already on file and using parental control systems layered on top of shared family accounts. That history is part of why this moment is notable: PC storefronts, which have historically had the loosest age controls of any major distribution channel, are now being forced to catch up to standards regulators expect from every platform, regardless of form factor.

Competitive Comparison: Epic, Steam, PlayStation Store, Xbox Store, GOG

Zooming out from the Epic-versus-Steam comparison, Australia’s R18+ enforcement wave is forcing every major storefront to show its hand on age assurance at the same time. GOG, Steam, and Epic already compete heavily on refund policy and DRM stance, and age verification is quickly becoming another axis of comparison that Australian players are actively discussing since the rollout.

PlatformAge-check status (Australia, Sept 2026)Primary method
Epic Games StoreLive since Sept 9, 2026Choice of 4 (selfie, card, ID, bank)
SteamLive since Sept 9, 2026Credit card only
PlayStation StoreExisting parental controls and payment-linked accountsAccount-level, payment-tied
Xbox StoreExisting parental controls and payment-linked accountsAccount-level, payment-tied
GOGNo public R18+-specific age-verification announcement as of this rolloutSelf-declared birth date

Console makers have a structural advantage here that PC storefronts lack: PlayStation Store and Xbox Store purchases have always run through a payment method already tied to the account and, often, to a household’s shared billing profile, which gives them an existing framework to lean on rather than building new age-assurance rails from scratch. That is part of why the current pressure is landing hardest on PC-first storefronts like Steam and Epic Games Store, which built their purchase flows around a looser, self-declared model for years.

Privacy and Security Concerns Around Age-Verification Data

Every method on Epic’s list involves handing a third party some form of sensitive data, whether that is a facial image, a government ID photo, banking-linked identity confirmation, or card details. Epic’s stated policy is that biometric images used for facial estimation and photographed ID documents are deleted immediately after the check completes, a claim reporters have repeated but that is not independently auditable by outside researchers on a rolling basis (ID Tech Wire).

Privacy advocates flagged this exact tension earlier in 2026, before either storefront’s rollout went live, warning that mandatory age-assurance systems for R18+ content create new categories of sensitive data that did not previously need to exist for a game purchase (ABC News Australia). Australia’s privacy regulator, the Office of the Australian Information Commissioner, has general oversight over how personal information collected for these checks must be handled, stored, and eventually destroyed, though neither Epic nor Valve has published a detailed, independently verified breakdown of its data-retention practices specific to this rollout.

The ConnectID option is worth watching closely on this front. Because it routes verification through a player’s existing bank relationship rather than a new identity vendor, it theoretically limits how much new personal data Epic itself has to store, shifting more of the trust relationship to institutions Australians already use for other identity-linked services (ConnectID).

What Comes Next: ConnectID Rollout and Other Regions

The Global Template Question

Epic has already signaled its next step: the ConnectID bank-verification option was announced alongside the initial three methods but was not available at the September 9 launch, with a rollout expected later in September 2026. That staggered release suggests Epic is treating its four-method system as a work in progress rather than a finished product, with room to add or refine options as it gathers data on which methods Australian players actually use.

The bigger open question is whether this becomes Epic’s global template. Nothing in the company’s public statements commits it to rolling the same four-method system out to the UK, EU, or individual US states as their own age-verification laws phase in, but building the infrastructure once and reusing it across markets is the more efficient path for any platform that expects similar rules to keep spreading. Steam faces a version of the same choice, and its card-only model is far cheaper to reuse than Epic’s multi-vendor stack, even though it verifies a much smaller share of the eligible adult population.

Industry and Player Reactions

Reaction inside Australia’s gaming community has split largely along the same lines the two systems create. Coverage of Steam’s rollout has focused almost entirely on exclusion, with reporting highlighting that debit cards, PayPal, and prepaid cards are all rejected outright, leaving a majority of adult players locked out of content they are legally entitled to buy (ID Tech Wire).

Coverage of Epic’s rollout has been comparatively muted, in part because the four-method design gives most adult players a viable path that does not involve a rejected payment instrument. That does not mean the Epic system is free of criticism; players uncomfortable submitting a selfie or government ID to a third-party vendor still have to weigh that trade-off against the friction of finding an alternative, since Epic has not offered a fully anonymous or document-free method beyond facial estimation and the still-rolling-out bank option.

Predictions: Where Age Verification in Gaming Goes From Here

  • Expect Valve to add at least one alternative verification method in Australia within the next two to three months, given the scale of the exclusion problem its credit-card-only system has created and the negative press it has already generated.
  • Expect other regions with pending or active age-verification laws, including UK and EU jurisdictions, to reference the Epic-versus-Steam contrast directly when drafting technical guidance for what counts as an acceptable verification method.
  • Expect identity-verification vendors like Yoti, Stripe Identity, and Veriff to sign additional gaming-platform contracts over the next two quarters, using the Epic Games Store integration as a public reference case.
  • Expect PlayStation Store and Xbox Store to eventually face explicit Australian scrutiny over whether their existing payment-linked account model meets the same R18+ standard being applied to PC storefronts, even though neither has been the focus of this specific rollout.
  • Expect GOG and smaller PC storefronts to face increasing pressure to publish their own Australian compliance plan, given that both larger competitors have now set a public precedent that regulators can point to.

How Storefronts Are Balancing Compliance and Friction

The underlying tension every platform is navigating is the same: age verification strict enough to satisfy regulators tends to be strict enough to frustrate legitimate adult customers, and age verification loose enough to avoid frustrating customers tends to fail regulatory scrutiny. Epic’s four-method approach is a bet that offering choice reduces friction without sacrificing compliance, since a regulator reviewing the system can point to robust options like government ID scanning even as most users opt for the faster selfie check.

Steam’s single-method approach is a different bet entirely, one that prioritizes engineering simplicity and existing payment infrastructure over inclusivity. It is also, notably, the cheaper system to build and maintain, since it requires no new third-party vendor contracts and reuses payment infrastructure Valve already operates worldwide. Whether that cost advantage outweighs the reputational and access-equity costs it has already generated will likely determine whether Valve revises its approach before other regions adopt similar rules.

Frequently Asked Questions

When did Epic Games Store’s age verification for R18+ games start in Australia?
The requirement took effect on September 9, 2026, one day after Epic announced the change on September 8, 2026.

What verification methods does Epic Games Store accept in Australia?
Four methods: a facial age-estimation selfie through Yoti, a credit card authorization through Stripe, a government ID scan through Veriff, and a bank-based check through ConnectID, with the ConnectID option rolling out later in September 2026.

Does Epic’s age check affect games I already own?
No. Epic has stated the requirement applies only to downloading or buying new R18+ titles. Existing library access is not affected, and games rated below R18+ are not affected at all.

How is Steam’s age verification different from Epic’s?
Steam accepts only one method: a valid Australian credit card linked to the account. Debit cards, PayPal, and prepaid cards are not accepted, and removing the card from the account can block access to R18+ titles the player already owns, not just new purchases.

Why can’t Steam users use a debit card instead of a credit card?
Valve has not published a detailed technical justification; reporting on the rollout describes the credit-card requirement as a design choice tied to Steam’s existing payment infrastructure rather than a technical limitation.

Does this affect players outside Australia?
No. Both Epic and Steam have limited the requirement to accounts associated with an Australian billing address or region setting.

Is my selfie or ID document stored by Epic Games or its vendors?
Epic’s stated policy is that biometric images from Yoti and ID document photos from Veriff are deleted immediately after the verification check is completed, though this practice has not been independently audited in public reporting.

Will PlayStation Store and Xbox Store also add new age verification in Australia?
Neither has announced a new R18+-specific system as of this rollout. Both console storefronts already tie purchases to a payment method on file, which regulators may eventually scrutinize under the same standard applied to Steam and Epic Games Store.

Related Coverage

Nadia Dubois

Nadia Dubois

AI & Innovation Editor

Nadia Dubois is the AI & Innovation Editor at Tech Insider, where she tracks the rapid evolution of artificial intelligence, from foundation models to real-world enterprise deployment. She previously covered AI and startups for La Tribune and contributed to MIT Technology Review's European coverage. Nadia specializes in generative AI, AI regulation, and the intersection of technology and European industrial policy. She holds a dual degree in Computational Linguistics and Journalism from Sciences Po Paris.

View all articles