A single regulatory deadline has triggered one of the sharpest spikes in VPN adoption Proton VPN says it has tracked. The company reports a 1,400 percent hourly increase in signups over its baseline on Friday, July 25, the day the UK's Online Safety Act age verification requirements took effect. The numbers, visible on Proton VPN's own Observatory page, point to a wave of British users seeking to sidestep identity checks rather than abandon the content those checks are meant to restrict.
What the Law Actually Requires
Under the Online Safety Act, websites and apps hosting explicit material must now confirm a visitor's age before granting access. Acceptable methods include facial age estimation and verification tied to banking details. The UK communications regulator, Ofcom, began enforcing the rule at midnight British Summer Time on Friday. The law's scope is broader than many assume: it covers not just dedicated adult sites such as Pornhub, but also dating platforms like Tinder and Hinge, where explicit content can appear. The stated goal is straightforward - keep minors from encountering adult material online. The practical effect, judging by the data, has been to push a large number of adult users toward tools that let them avoid submitting identity documents or biometric scans to third-party verification services at all.
Why a VPN Sidesteps the Check
A VPN works by routing a device's internet traffic through an encrypted tunnel to a server operated by the VPN provider before that traffic reaches the open web. This masks the user's real IP address and conceals browsing activity from internet service providers and, in many cases, from the websites being visited. Because age verification obligations under UK law apply based on where a site's audience is deemed to be located, a user who connects to a server outside the UK can appear to be browsing from another jurisdiction entirely - one without the same requirements. This is not the primary design purpose of a VPN, which is fundamentally a privacy and security tool, but it is a well-understood side effect that has made VPNs the default workaround whenever a country introduces mandatory identity checks for online content.
This is not an isolated incident. Proton VPN previously recorded roughly a 1,000 percent jump in new subscribers in June, after Pornhub withdrew from France, its second-largest market, rather than comply with a French age verification law. The parent company behind Pornhub, Aylo, later told Mashable it would comply with the UK's version of the rule instead of repeating that withdrawal. Proton VPN has described the current UK surge as different in character from the French episode: rather than a short spike, the company says signups have remained elevated, at levels it would typically associate with major civil unrest rather than a routine policy change. Search interest in the UK for "Proton VPN" also rose sharply in the days surrounding the deadline, according to Google Trends data the company shared.
The Broader Enforcement Problem
Early research cited by Mashable suggests VPNs make age verification laws difficult to enforce in practice, both in the UK and in other countries experimenting with similar rules, including parts of the United States. If a meaningful share of the affected audience can reroute its traffic through a server abroad, the law's reach is blunted regardless of how rigorous the verification method is on paper. That tension sits alongside separate, unresolved debates about free expression and the privacy risks of asking adults to submit facial scans or financial information just to access legal content. Regulators now face a familiar dilemma: tightening enforcement against VPN use would raise its own civil liberties questions, while leaving it unaddressed undermines the law's central purpose.
A Tool Built for a Different Era, Now in the Spotlight
VPN technology was built for securing remote access and shielding data from surveillance, not for evading content regulations, but its core mechanism - hiding location and identity from the services a person connects to - makes it naturally suited to this use case. Proton VPN, founded in 2017 and now operating more than 13,700 servers across over 120 countries, is one of several providers built around strong encryption and a stated commitment to minimal data retention. Its spokesperson told Mashable the pattern of signups "clearly shows that adults are concerned about the impact universal age verification laws will have on their privacy." Whatever the UK's long-term regulatory response turns out to be, the episode illustrates a recurring dynamic: whenever governments tighten the terms of access to the internet, the tools built to preserve privacy and bypass restrictions tend to see their audience grow in direct proportion.