Australia's attempt to bar under-16s from social media has produced the opposite of its intended effect, with reports suggesting affected teenagers are using these platforms more than before the policy took hold. Rather than reconsider the ban's design, the government is preparing to sue the companies it blames for the shortfall: Meta's Facebook and Instagram, TikTok, Snapchat, and YouTube.
A Policy That Collided With Reality
When Canberra introduced its age-verification regime, officials framed it as a straightforward fix: if platforms could identify and remove underage users, the problem would resolve itself. That assumption ignored how determined teenagers - and the tools now available to them - actually behave online. Age verification depends on signals that can be spoofed, falsified, or bypassed entirely, and enforcement at scale has proven far harder than legislating it.
Communications Minister Anika Wells has placed responsibility squarely on the platforms, arguing that the law itself is sound and that compliance, not design, is the failure point. The companies dispute this characterization. Meta has pointed to the removal of hundreds of thousands of suspected underage accounts as evidence of good-faith enforcement. The gap between those two narratives is exactly what a Federal Court case, if filed, would be asked to settle.
Why Bans Without Technical Teeth Rarely Hold
Age-gating systems typically rely on self-reported birthdates, document checks, or behavioral inference - none of which are foolproof. Teenagers have long demonstrated fluency with workarounds: alternate accounts, borrowed credentials, and increasingly, virtual private networks that mask location and device identity. A VPN routes traffic through a remote server and encrypts it in transit, which can make it appear as though a user is browsing from a different country or network entirely. For a regulator trying to enforce geographically bound rules, that single feature undermines much of the enforcement model.
This is not a uniquely Australian problem. Spain and Indonesia have both introduced youth-focused restrictions, and in both cases, young users have adapted using similar circumvention tactics. The pattern suggests that bans built around identity verification without addressing the broader ecosystem of evasion tools are structurally vulnerable from the outset.
What a Legal Fight Would Actually Decide
A lawsuit from the eSafety Commissioner would not resolve the underlying technical tension - it would test who bears legal liability when a policy fails to achieve its stated goal. If courts side with regulators, platforms could face pressure to adopt far more invasive identity-verification measures, raising fresh privacy concerns for all users, not just minors. If courts side with the platforms, it could weaken the legal basis for similar age-based restrictions elsewhere.
Either outcome carries implications beyond Australia. Governments watching this case will calibrate their own approaches to youth online safety accordingly, and the debate over VPN use as a loophole - versus a legitimate privacy tool - is likely to intensify as more countries experiment with similar restrictions.
The Broader Stakes for Digital Rights
Advocates for digital rights have been quick to note that VPNs serve purposes well beyond evading age checks: protecting users from surveillance, securing data on public networks, and preserving access to information in regions with heavy content restrictions. Treating VPN use itself as the problem risks conflating a general-purpose privacy tool with the specific policy failure it happens to expose.
Australia's experience offers a preview of the tension other nations will face as they attempt similar restrictions: legislation can set rules, but enforcement depends on technical and behavioral realities that lawmakers often underestimate.