Four years ago, exactly one US state required adult websites to check IDs. In mid-2026, the count of states that have enacted age-verification laws has crossed twenty-six — more than half the country — and the pace is not slowing.
The 2026 additions
This year alone the map gained several new entries. West Virginia’s law went into force on June 12. Iowa’s followed on July 1. Missouri signed its own version on July 9, effective August 28 — and stretched the model to cover social-media platforms.
The template is remarkably consistent from state to state: a one-third threshold of “material harmful to minors,” a menu of ID-based verification methods, per-day civil penalties in the five figures, and a ban on retaining users’ verification data.
Why the dam broke
The legal question was settled in June 2025, when the Supreme Court upheld Texas’s law 6–3 in Free Speech Coalition v. Paxton. Once intermediate scrutiny replaced strict scrutiny as the test, state legislatures stopped worrying about court challenges. Louisiana started the wave in 2022; the post-Paxton year turned it into standard legislative furniture.
What compliance actually looks like
In practice, the biggest platforms have chosen exit over compliance. Aylo’s Pornhub is dark in roughly 25 states, redirecting visitors to a protest message about ineffective site-level checks. Louisiana remains the one state where the company actually verifies ages, through the state’s digital-ID system. Everywhere else, the traffic doesn’t vanish — it migrates to sites that ignore the laws, or through VPNs that make state lines meaningless.
That gap between the law’s reach and its effect is now the core of the industry’s counter-argument, one Aylo is pressing loudly in the UK as well: age gates at the site level punish the compliant and reward the reckless, while device-level verification sits unused.
What to watch
Bills modeled on the same framework are pending in several remaining statehouses, and pressure for a single federal standard is building from both industry and child-safety groups. The question for 2027 is no longer whether America verifies age online — it’s who ends up holding the IDs.
