Social communication platform Discord recently announced the phased rollout of a novel age assurance mechanism for its user base. This sophisticated system automatically infers a user’s age demographic based on their daily interaction habits. If the algorithm determines the user is an adult, the system remains unobtrusive. However, if it classifies the user as a minor, it will mandate supplementary age verification procedures.
Utilizing Account Behavior for Age Inference
The Discord age verification framework evaluates parameters such as account registration longevity, community and server affiliations, linked gaming profiles, and overarching activity patterns, strictly without scanning personal chat transcripts or voice call content. Newly created accounts, or those lacking sufficient behavioral data for definitive age calculation, receive an “unconfirmed” designation. Under these circumstances, Discord may compel the user to complete additional authentication steps.
Users classified as adults will experience no noticeable disruption, although they can view their designated status within their account settings. Conversely, accounts with indeterminate ages default to minor status. While these presumed minors retain access to direct messaging, voice calls, and standard communities, the platform strictly restricts their entry into adult-oriented servers and limits specific configuration modifications.
Expanding Identity Verification Options
For accounts flagged as minors, users can select from various verification methods tailored to their regional regulations and device capabilities. These options include, but are not limited to, linking a valid credit card, securely sharing age range data from the App Store or Google Play, utilizing Google Wallet passport credentials, or executing age verification via facial recognition selfies or official identification documents. As detailed in recent coverage regarding how Discord updated its age assurance global rollout, these proactive measures aim to enhance platform safety comprehensively.
Notably, selfie-based age verification processes occur entirely locally on the user’s device. Upon completion, the system instantaneously obliterates the image data; Discord receives merely the cryptographically secure age signal without retaining any biometric information. Conversely, Stripe processes all credit card verifications, retaining only the final four digits of the card number and associated transaction logs in strict compliance with financial regulations.
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.