Yoti age verification: privacy issues and concerns

Yoti, an age verification service, is used by around 60 percent of the websites and services that require this feature. This includes popular platforms such as PlayStation, Meta, and TikTok. A recent report by researchers from the Georgia Institute of Technology and the University of California has shed new light on the company’s practices. Titled "Papers, Please: A First Look at Age Verification on the Web," the report takes a critical look at Yoti’s data collection and privacy practices.

Privacy controversies

Presented on May 18, 2026 at the IEEE Symposium on Security and Privacy, the report says Yoti uses concerning data collection methods. The researchers found that Yoti "collects significant private information beyond what is strictly necessary for age verification." This includes highly detailed data about a user’s device, such as operating system versions, available RAM, connection type, and CPU architecture, which the researchers say is not essential for estimating a user’s age.

Identifiable information and hidden third parties

One of the most worrying findings in the report is that Yoti shares personal information with several less visible third parties, including payment processor Stripe. The researchers note that Stripe also collects substantial telemetry that could potentially be used to uniquely identify a device. They argue that this data collection paints a "concerning picture of the privacy and effectiveness of age verification."

Criticism of Yoti’s systems

The study not only exposes shortcomings in Yoti, but also raises questions about the overall security of the data users trust the service with. Although Yoti has said it fixed the issue with Stripe, which it described as a "bug," the researchers remain skeptical. They have not been able to confirm the validity of that claim, which leaves doubts about how secure the collected data really is.

The findings in this report are highly relevant to the future of age verification on the web. The debate around privacy and the protection of personal data is growing, especially as major platforms like PlayStation and Meta rely more heavily on these technologies.