A bizarre and controversial workaround to the UK’s new online safety regulations has gone viral, with reports claiming that some users are using ultra-realistic game graphics—specifically the likeness of actor Norman Reedus in Death Stranding—to fool age verification systems.
The incident follows the rollout of the UK’s stricter online safety measures, which aim to limit access to adult and potentially harmful content for underage users. Platforms including pornographic websites, Reddit, and Discord are now legally required to verify the age of UK users using methods such as selfie-based age estimation, credit card authentication, and government-issued photo ID matching.
Those failing to comply with the law risk fines of up to £18 million or 10% of global revenue, according to Ofcom, the media regulator overseeing enforcement.
Yet some users have reportedly found a loophole. Viral social media posts suggest that tech-savvy individuals have used photorealistic images of Norman Reedus’s character from Hideo Kojima’s video game Death Stranding to trick AI-based age estimation tools. The realism of the character models, praised by critics and gamers alike, appears to be sufficient to confuse certain automated systems into verifying users as adults.
While these claims have not been formally verified by regulators or independent cybersecurity experts, the news has sparked both humour and concern across online communities.
“This shows how good the graphics are—and how flawed the system is,” one user commented on X (formerly Twitter). “Imagine getting blocked by Ofcom but unblocked by Norman Reedus.”
The broader reaction to the UK’s online safety reforms has been mixed. While some applaud the attempt to protect children from inappropriate content, others view the enforcement methods as intrusive and potentially risky in terms of data privacy. Many users have voiced discomfort about uploading official documents or facial data, citing fears of surveillance and potential data breaches.
VPN usage has also surged in the UK in recent weeks, with many adults seeking alternative ways to access unrestricted content. According to analytics firm NetSecure, searches for “VPN for UK age check” have risen by 220% since the law went into effect earlier this month.
Ofcom has yet to comment on the specific reports of image-based manipulation using game characters. However, cybersecurity specialists warn that as verification technology advances, so too do the tactics used to circumvent it.
“This kind of cat-and-mouse game is inevitable,” said Martin Ellis, a digital ethics researcher at the University of Edinburgh. “AI tools that determine age based on images are not foolproof, and ultra-realistic CGI can exploit that. It’s a reminder that technological solutions to social issues need careful implementation—and backup.”
The UK government has not signalled any immediate changes to the verification policy, but experts anticipate tighter safeguards and AI updates in the coming months. Meanwhile, the unintended role of video game graphics in digital identity loopholes continues to fuel debate over privacy, regulation, and innovation.
