Game Store Age Verification by Country: What Each Store Actually Accepts (2026)

Two halves, and they do different jobs. The first half is the legal obligation — the Age-Restricted Material App Distribution Services Code is a real Australian rule, written by the industry and registered by the online safety regulator, and it does bind Valve. The second half is Valve's chosen way of satisfying it. People read the whole message as law. Only the first sentence is.

Mature Content Preferences is the Steam setting the message wants you to change afterwards — the row of checkboxes for violence, nudity and adult themes on your Steam store preferences page. Without a qualifying card on the account, those boxes do not stick.

The block covers the storefront: R18+ product pages, and those titles disappearing from search and store recommendations. It does not reach into your library. As one Australian user put it while looking at a shelf of games he owned and a store page he couldn't open: "I can play the Resident Evil games that I own, but can't look at their store pages."

Australia's age-assurance obligations for app distribution platforms commenced on 9 September 2026, and Steam's block appeared the same day. The code itself had been in force since 9 March 2026, with the age-assurance measures among those it scheduled to start later.

Checked 12 September 2026. You can see the current behaviour on any R18+ title's store page — Resident Evil Village is one, and Steam lists it as requiring age 18.

The same statement notes that "Many of the largest app stores have now introduced age assurance for their Australian users, including Microsoft, Sony, Apple, and Google." And it adds a detail that rarely makes it into coverage: "these codes were written by industry" — the platforms helped draft the rules they are now complying with.

The regulator's list is the obvious comparison, and it is also the weakest one, because Microsoft, Sony, Apple and Google are console and phone businesses. It is easy to wave them away as different animals. The comparison that actually lands is the one nobody is making.

That is a coherent argument, and parts of it are genuinely stronger than the alternatives. Sending a face or a passport to a third-party vendor is a bigger disclosure than adding a card to a store that already processes cards. Valve is right that it handles the card itself rather than routing you to an outside verifier — PCI-DSS is the card industry's own security standard, audited by an outside assessor, and being certified under it is a real claim rather than a slogan.

But it is an argument for offering a card check. It is not an argument for offering only a card check. Epic offers the identical Stripe card check and three other options, and a user who prefers the card can simply pick the card. Nothing about adding a second door forces anyone through it.

Look at what is on that list. A mobile network operator check confirms your age against the phone contract you already hold, and discloses no document and no photograph of your face. Open banking confirms it through your bank, which lets an app read a single fact from your account without handing it your statements. Email-based age estimation infers it from how long an address has been in use and what it is registered with. Valve's privacy argument — that handing a face or a passport to an outside vendor is invasive — says nothing about any of those three. They were on the regulator's list the whole time.

And a credit card is the one method on Ofcom's list that requires more than being over 18. It requires a bank to have granted you credit. Valve's own page explains the mechanism: "in the UK, an individual must be at least 18 years of age to obtain a credit card, therefore credit card issuers are obliged to verify the age of an applicant." That works in reverse too. Every adult who has been declined credit, or who has never applied for it, fails a test they are old enough to pass.

So the honest summary is not that Valve picked a hostile option, and not that Valve had no choice. It is this: Valve picked the one method that also requires a credit check, out of seven the regulator had already approved, and published a privacy rationale that addresses none of the other six.

If you want the broader picture of how these storefronts differ on regional rules generally, our Steam, Epic and GOG region lock comparison covers the underlying mechanics.

It is tempting to read Valve as the laggard. Don't — the evidence doesn't support it. Steam and Epic both switched on 9 September 2026, the date Australia's age-assurance obligations commenced. Microsoft and Apple were early rather than on time. And Sony has not begun enforcing in Australia at all — PlayStation's Australian support page still says verification "will soon be required" and describes what will happen "when enforcement begins."

Valve's problem is the method, not the calendar.

Three things about that clause. It is the only rule in the entire agreement about location — there is no softer clause elsewhere that qualifies it. The phrase "or for any other purpose" is what makes it cover this situation, since an age check is neither a pricing restriction nor a content restriction. And it is long-standing, not something added in response to Australia: the same sentence appears near-verbatim in copies of the agreement from 2020 and 2021. This is a rule Valve has had on the books for years, not a reaction.

The stated consequence is termination of your account — every game on it. Australians are already warning each other about this in the same threads where the workarounds are being shared, and at least one user has reported their account being locked after connecting with a VPN during registration, taking five days to recover.

This is the same conclusion we reached about VPN tricks for gamers generally and about changing your account region to pay less : where a platform's terms prohibit it in writing and the platform names account closure as the penalty, the honest advice is not to do it, regardless of whether it would technically work.

If you're in Australia and you have a credit card, adding it resolves the block, and you should know it has to stay on the account to keep working. If you don't have one, buy your keys from a reputable third-party seller and redeem them, or buy that particular game on a store whose verification you can actually pass. Both are honest answers that cost you nothing and don't put your library at risk.

What you should not do is reach for the tool that appears to fit. The block is location-based, so a VPN looks like the obvious answer, and it is exactly the kind of obvious answer that ends with a terminated account and a decade of games gone. Valve wrote that rule down years before any of this.

And it's worth being precise about who decided what. Australia required stores to check that adults are adults, and let each store pick a method. Ofcom, facing the same problem a year earlier, published seven methods it would accept. A direct competitor shipped four of them on the same day Steam shipped one — including the very card check Valve uses, offered as a choice rather than a condition. Valve has a real argument for why a card is a private way to prove your age. It has never made an argument for why it should be the only way.