Roblox is in a tight spot. After years of reports involving child predators on Roblox, the company faces pressure from the public and government to clean up its platform. The company’s solution, announced on Nov. 18, is a cumbersome age verification system that might give us a preview of what’s to come — everywhere.
As detailed in a blog post, the safety initiative is bundled into two processes: a voluntary Facial Age Estimation system, and ID checks. Users can opt out of doing either, but basic features like basic text chat won’t be usable until a player submits their information. Once in the system, Roblox will limit how the user can interact with other people based on their age range. Roblox fans will be limited to communication with people within their own age range, which are categorized as: under 9, 9-12, 13-15, 16-17, 18-20, or 21+. Players are able to interact with people outside their age range only if they use something Roblox calls Trusted Connections, which requires an existing real-world relationship. From here, things get a little fuzzy: Roblox says that it will enforce Trusted Connections via QR codes, but that it is still exploring more ways to ensure fans can continue interacting with people they know and trust.
The Facial Estimation system is done through the Roblox app via the user’s camera, and is processed by a company called Persona. Persona’s website notes that user information is deleted immediately and is not sold. Persona also handles ID checks, but the Roblox blog announcement says that the ID verification process will vary depending on local laws. Systems like ID.me typically require users to submit a picture of a government-issued ID.
Early next year, Roblox will also monitor all chat through its platform, prevent users from sharing social media links, and promises to provide more tools to block and report users. All of these precautions are well-meaning, and done to protect young users. But they are also undeniably a nuisance, especially when the systems do not work as advertised. Already, there are reports of the selfie system incorrectly assigning the wrong age to clients. Roblox users can correct such mistakes via ID verification, but having to jump through so many hoops just to use text chat is proving unpopular with the userbase at large. Some fans say they are unwilling to share sensitive information like a personal ID with a platform like Roblox, even if the company assures its users the process is secure.
“I AM A GROWN WOMAN, AND APPARENTLY I’M 12,” one Reddit user exclaims, after apparently using the Roblox selfie verification.
“My friend’s brother, who is 14, got passed as 18+,” another user says, “which just shows that the platform is ruined because minors can still be in contact with adults [no] matter what they do.”
“Whoever has a baby face, plz be aware that Roblox might estimate your age lower than your real age & you have to use your ID as extra proof,” warns X user @Stargenix19, a 20-year-old who says the system mistook them for being 13.
Roblox faces a difficult problem here. Incidents involving child predators have incurred legal action from the government, as well as widespread criticism from users and concerned parents who feel that the platform does not adequately protect its young users. The selfie check and the various incoming measures are meant to solve that problem — but also create entirely new ones.
Roblox, however, believes systems like age verification are “establishing what we believe will become a new industry standard.” The company believes it is paving the way forward when it comes to internet security and is encouraging others to do the same.
“We invite others in the industry to join us and follow our comprehensive approach to help make the entire online world safer for children and teens,” the blog post reads.
Roblox has a vested interest in framing itself as a leader in online safety, given the negative reputation surrounding the platform. Regardless of the PR spin, however, Roblox is right. The wider internet is moving toward a future where our online identities are tied to our real-world bodies more than ever. This much is evident in the world of gaming and well beyond. Earlier this year, Discord implemented a similar age-verification check for some regions — which users proceeded to bypass in silly ways. In places like Australia, tech companies like Google will soon be required to age check their users. Apple recently announced its Digital ID, which allows users to legally verify their identity through the iPhone’s Wallet app. States like Illinois are rolling out digital ID initiatives. Really, it’s been a long time coming. Companies like Blizzard sometimes ask users to submit ID for various account-related actions, like password recovery.
Even putting aside the annoyance factor, users have valid reasons to be concerned if companies pushing for ID-based interaction over the internet. Even if companies like Persona promise to delete information and not sell it, that doesn’t mean they can’t be vulnerable to attack. For Discord, it took less than a year for a breach of sensitive user information. Apple might tout that it cares deeply about user security, but that doesn’t prevent government officials from pressuring people to open their iPhone for inspection. Airports claim that photos taken at point of entry help with identification and are not used for surveillance, yet the Department of Homeland Security also notes that government agencies do share biometric data with each other. Biometric data has been a key tool used by law enforcement in the nationwide ICE raids against immigrants. And there’s increasing concern around gaming storefronts and porn sites requiring age verification amid a political environment that sometimes feels vindictive toward anyone who falls outside the norm.
It’s difficult to predict how all of these different age-verification initiatives might go awry when they clash with the messiness of the IRL world and bad faith actors. The lack of legislation surrounding many of these technologies also prevents people from feeling secure when handing over information. It’s an especially tall ask when the activity involved is wanting to play a Brainrot game with your friend and not, for example, hoping to get through airport security in a speedy way.
For now, Roblox users might complain and vow to take a stand against imposing measures like ID verification. But what’s happening on Roblox — and Steam, Google, and elsewhere — is coming to everyone.
