Age verification laws are spreading fast, and The Verge is raising an uncomfortable question: what happens when everyone starts using VPNs to bypass them? The answer lawmakers are quietly discussing: ban the VPNs.
The logic chain is straightforward. States pass laws requiring age verification to access social media, adult content, or even certain websites. Users don't want to hand over government IDs to random websites. VPN adoption spikes because routing through a server in a different jurisdiction bypasses the requirement. Suddenly the age verification law is completely unenforceable, and legislators start asking why VPNs should be legal.
This isn't hypothetical. Several countries have already restricted or banned VPN use, and the rhetoric is remarkably similar: preventing crime, protecting children, ensuring compliance with local laws. Once you've established that age verification is a legitimate government interest, banning tools that circumvent it becomes much easier to justify.
The technical reality is that you can't fully enforce age verification without controlling VPN access. People will route around restrictions because the internet was designed to route around restrictions. So governments face a choice: accept that the laws are unenforceable, or start restricting the tools people use to evade them.
The problem is that VPNs aren't just for bypassing age checks. They're essential privacy tools for journalists, activists, security professionals, and anyone operating in hostile environments. They protect corporate networks, secure remote work, and provide basic privacy in an era of comprehensive surveillance. Banning or restricting VPNs has massive collateral damage.
But once you've committed to age verification as a policy goal, the pressure to crack down on circumvention tools becomes overwhelming. Florida, Texas, Utah - multiple states have passed age verification laws already. When compliance rates are low because everyone's using VPNs, the next legislative session will hear testimony about "loopholes" that need closing.
China has shown how this works at scale. They have extensive age verification requirements for online services they've banned unauthorized VPN use. It's enforceable because ISPs are required to block VPN traffic and users can be punished for circumvention. That's the model, and it works if you're willing to build the surveillance infrastructure.
