The Global Push for Internet ID

China, the EU, and the UK are ending online anonymity. The US may follow.

State of Surveillance Editorial Team

TL;DR: Online anonymity is dying. In July 2025, China launched mandatory "Internet certificates", unique IDs tied to your real identity for all online accounts. The EU is rolling out digital identity wallets by 2026. The UK's Online Safety Act requires age verification for social media, effective July 2025. France requires ID verification for adult content. Australia is banning social media for under-16s. The US has 20+ state age verification laws. The justifications vary, child safety, combating fraud, preventing harm, but the result is the same: your real identity attached to your online activity. Here's where this is heading.

China: The Full Implementation

China shows what mandatory internet ID looks like at scale [1].

Current requirements:

  • Real-name registration required for social media, payments, travel
  • Can't buy a SIM card without government ID
  • Can't open a WeChat account without real-name verification
  • Can't buy a high-speed train ticket without ID check

July 2025: Internet Certificates

China launched the "National Online Identity Authentication Public Service", a system that gives each citizen a unique "Internet certificate" [2].

  • Submit personal information to the government
  • Receive a unique code for online identity verification
  • Use the code across all online platforms
  • All activity linked to your real identity

The official framing: "real name backend, voluntary nickname frontend." You can use a pseudonym publicly, but the government knows who you are.

This isn't a proposal. It's live.

European Union: Digital Identity Wallets

The EU is building its own identity infrastructure [3].

EU Digital Identity Wallet (2026):

  • Every EU citizen will have access to a digital ID wallet
  • Stores government-issued credentials
  • Can be used for age verification, identity proof
  • Designed for cross-border recognition

EU Parliament vote (November 2025):

  • Non-legislative report on social media age limits
  • Proposed minimum age of 16 for social media
  • Ages 13-15 allowed with parental consent
  • Would require identity verification to enforce

The EU frames this as "digital sovereignty" and consumer protection. But the infrastructure being built can verify identity for any purpose, not just age.

United Kingdom: Online Safety Act

The UK's Online Safety Act takes effect in July 2025 [4].

What it requires:

  • Platforms hosting adult content must verify user ages
  • Social media must prevent children from accessing "harmful" content
  • Ofcom (regulator) approves verification methods

Approved verification methods:

  • Open banking (age from financial records)
  • Facial recognition
  • Identity document verification
  • Mobile network operator checks
  • Digital identity services

Reddit and Bluesky have already implemented age verification for UK users. Platforms that don't comply face massive fines.

The stated goal is child safety. The mechanism is identity verification for everyone.

France: Age Verification for Adult Content

France has been aggressive on age verification [5].

January 2025 regulation:

  • Pornographic sites must verify user ages
  • Platforms must implement document ID or facial recognition
  • Failure to comply: significant fines

Social media:

  • June 2023 law requires parental consent for users under 15
  • Platforms face 1% of revenue fines for non-compliance
  • Implementation has been delayed but pressure continues

France is leading Europe in mandating identity verification. Other countries are following.

Australia: Under-16 Social Media Ban

Australia went further than age verification, it banned social media for children entirely [6].

November 2025 law:

  • Social media banned for users under 16
  • Platforms responsible for enforcement
  • No parental consent exception
  • Fines up to A$50 million for non-compliance

To enforce a ban, platforms must verify ages. To verify ages, they need identity documents. The ban becomes an ID requirement in practice.

Critics point out that determined teens will use VPNs. The law may be unenforceable, but it establishes the precedent that platforms must verify identity.

United States: The Patchwork

The US doesn't have federal internet ID requirements, yet. But states are moving fast [7].

State age verification laws (as of 2025):

  • 20+ states have passed or proposed age verification laws
  • Texas, Utah, Louisiana, Virginia among the first
  • Primarily targeting adult content sites
  • Some extending to social media

Federal proposals:

  • KOSA (Kids Online Safety Act) passed Senate, stalled in House
  • COPPA 2.0 would extend child privacy protections to teens
  • Multiple bills would require age verification for various purposes

The EFF has documented the proliferation: "Age verification laws are proliferating fast across the United States and around the world."

The EFF's 10 Dangers

The Electronic Frontier Foundation published a warning about age verification [8]:

Key concerns:

  1. Privacy destruction: Links real identity to browsing activity
  2. Data breach risk: Verification databases become targets
  3. Chilling effect: People avoid legal content to avoid ID verification
  4. LGBTQ+ harm: Verification creates records of sensitive access
  5. Abuse potential: Authoritarian governments use identity systems for persecution
  6. Technical failures: Verification systems make errors, lock out legitimate users
  7. Commercial exploitation: Verification companies monetize identity data
  8. Mission creep: Systems built for one purpose expand to others
  9. Enforcement impossibility: VPNs bypass geographic restrictions
  10. False sense of security: Doesn't actually protect children from harm

The EFF built a resource hub specifically to fight age verification laws. They see this as a fundamental threat to online freedom.

The Convergence

Different countries use different justifications, but the infrastructure is the same [9]:

Region Justification Mechanism
China National security, social harmony Mandatory Internet certificates
EU Digital sovereignty, consumer protection Digital identity wallets
UK Child safety Age verification requirements
Australia Child safety Social media ban for minors
US States Child safety, morality Age verification for adult content

The justifications differ. The result is the same: real identity tied to online activity.

Once the infrastructure exists, it can be used for any purpose. Age verification becomes identity verification. Identity verification becomes surveillance.

The Musk Connection

This brings us back to X and Elon Musk [10].

X already requires government ID verification:

  • X Blue verification requires government ID
  • Monetization requires ID verification through Au10tix
  • Au10tix is an Israeli company with intelligence community ties
  • Data retention and security have been questioned

The chaos-to-order pipeline:

  • Grok generates harmful content (CSAM, deepfakes)
  • Platform becomes associated with abuse
  • Regulators demand accountability measures
  • ID verification becomes the "solution"

Whether intentional or not, the pattern is clear: platform chaos creates demand for identity verification. Musk's X is already implementing it. Other platforms will follow.

What We Lose

Online anonymity isn't just about hiding. It enables:

  • Whistleblowing: Exposing wrongdoing without retaliation
  • Activism: Organizing against authoritarian regimes
  • LGBTQ+ safety: Exploring identity in hostile environments
  • Abuse survivors: Escaping abusers who track real names
  • Political dissent: Criticizing power without consequences
  • Privacy: Reading, learning, exploring without surveillance

When every online action is tied to your real identity, self-censorship becomes the default. The internet becomes a performance, not a space for exploration.

China already has this internet. The West is building toward it, with better PR.

The Bottom Line

China launched mandatory Internet certificates in 2025. The EU is rolling out digital identity wallets. The UK requires age verification for social media. Australia banned social media for under-16s. US states are passing age verification laws.

The justifications vary: national security, child safety, consumer protection, preventing fraud. The mechanism is the same: tie your real identity to your online activity.

Once identity verification infrastructure exists, it expands. Age verification becomes identity verification. Identity verification becomes surveillance. The question isn't whether governments will track online activity, it's how quickly the infrastructure will be built.

Online anonymity is dying. The question is whether anything can be done to preserve it.

References

  1. Outbyte, China Digital ID and Real-Name Verification 2025: The End of Anonymity?
  2. Outbyte, Age Verification & Digital ID: A 2025 Privacy Reality Check
  3. Wikipedia, Social media age verification laws by country
  4. TrustCloud, Age verification on a global scale
  5. IDnow, Age verification on adult sites
  6. Shufti Pro, Age Verification Laws & Regulations Worldwide: 2025 Update
  7. EFF, Age Verification Is Coming For the Internet (December 2025)
  8. EFF, 10 (Not So) Hidden Dangers of Age Verification (December 2025)
  9. Biometric Update, Age Verification Report as countries trend toward stricter regulations (December 2025)
  10. TechRadar, 4 regions with age verification laws and how they're enforced