Simunix

UK customer Age Verification from AVUK is much more than just a pop box that anyone can tick to say that they are 18 years or over. 
The fundamental difference with this plugin is that it will take the name and address details your customer has used to register an account with on your website, and match against a database of UK people that contains date of births. 
Any website using WordPress and WooCommerce that sells age restricted products is required to prove they have only sold such products to customers over the age of 18. Verifying UK customers against actual data is the reliable and easy way to do this, with no inconvenience to your customers of manual age checks in the purchase process, thus reducing cart abandonment. 
Age restricted items include tobacco products and e-cigarettes, alcohol, 18+ films and computer games, bladed items, acids and other corrosive substances, offensive weapons, betting. This service uses a our API which is a 3rd party resource and requires an active credit balance.
Instant Age Verification
<h3></h3>
During the checkout process, your customer will input their name and address detail in registering for an account, or be logged in to an existing account containing these details. 
The plugin will instantly compare their name and address to a UK database and verify if they are age 18 or over. This age verification will be seamless in the background and your website’s process of checking out and paying for basket items will continue as normal. 
Any UK customer buying age restricted items that is not verified as 18+ will receive a message and be unable to proceed to purchase. You can then employ your own age checks on the customer and be able to flag them in the admin section as ‘manually verified’. They will then be allowed to purchase their age restricted items through your usual checkout process.
This service uses a our API which is a 3rd party resource and requires an active credit balance.
Demo our Age Verification data service here: [https://ageverifyuk.com/#demo)
Everything you need to know
<h3></h3>
<ul>
<li>Works using tried and tested data and methods from ageverifyuk.com which is an api developed by Simunix Ltd, established in 1998.</li>
<li>Matches name and address details for a UK customer against AVUK data sources and verifies if they are aged 18 or over.</li>
<li>All your customers can be viewed in the admin section where they will have a status of age verified or unverified. Here you have the ability to manually verify a customer, for use when they could not be automatically verified but have since passed your own proof of age checks.</li>
<li>You will be able to view a list of all your products in the admin section and tick any that are age restricted and require customer age verification. If all products on your website are age restricted (e.g. e-cigarette website) you can simply turn on age verification for the whole website.</li>
<li>As the plugin uses data from the AVUK.io website, you will need to set up a AVUK account.</li>
<li>Within your AVUK account you can update your login / password details and buy credits. 10 credits are deducted from your credit balance for every age verification check undertaken. The cost of each verification check will be between £0.10 and £0.29 depending on the size of credit pack you buy.</li>
<li>You will be able to view your credit balance and top up your credits at any time. You will receive notifications when your balance is running low.</li>
</ul>

Age Verify UK

Age verification for WooCommerce installations using the Age Verify UK method

xyzageverify

Most WordPress age verification plugins are age gates — a popup that asks visitors to click “Yes, I’m 18+” or pick a birthday from a dropdown. Anyone, including a minor, can click through in under a second. That used to be the standard. It is no longer a defensible compliance measure under the UK Online Safety Act, US state age verification laws (Texas, Louisiana, Virginia, and a growing list), or EU age assurance requirements under the Digital Services Act.
XYZ Age Verification is different. It confirms visitors are adults using a real-time selfie liveness check, with automatic escalation to government ID verification for borderline cases or stricter age thresholds. No biometric data is stored. No checkbox to lie to. No date-of-birth dropdown that a child can spin in five seconds.
When you need this plugin:
<ul>
<li>UK sites subject to the Online Safety Act and OFCOM enforcement</li>
<li>US sites subject to state-level age verification laws (Texas, Louisiana, Virginia, Utah, and a growing list)</li>
<li>EU sites subject to age assurance requirements under the Digital Services Act</li>
<li>Adult content, cannabis, alcohol, tobacco, firearms, and gambling sites where a click-through popup is no longer sufficient</li>
<li>Any site where “the visitor clicked Yes” is insufficient evidence that your audience is adult-only</li>
</ul>
Important — Cloudflare is required:
This plugin requires that your site is proxied through Cloudflare’s network. This is not an optional integration. Without Cloudflare, the plugin cannot determine where visitors are connecting from, and it will not work.
Setting up Cloudflare involves changing your domain’s DNS settings to point at Cloudflare’s nameservers. This is a real infrastructure change with real consequences:
<ul>
<li>Your email may stop working if you don’t carefully preserve your existing MX, SPF, DKIM, and DMARC records during the migration.</li>
<li>Other services that depend on DNS (subdomains, third-party integrations, SSL certificates) may need attention.</li>
<li>Reverting the change takes 24-48 hours for DNS propagation, so mistakes are not immediately undoable.</li>
</ul>
If you do not have experience with DNS migration, or if your site’s email and DNS are managed by someone else, please read these guides before installing the plugin:
<ul>
<li><a href="https://support.xyzinc.com/blog/18-why-the-xyz-age-verification-plugin-requires-cloudflare" rel="nofollow ugc">Why XYZ Age Verification requires Cloudflare</a> — explains what the plugin needs from Cloudflare and why no alternative works</li>
<li><a href="https://support.xyzinc.com/blog/2-2-cloudflare-setup" rel="nofollow ugc">Cloudflare setup guide</a> — step-by-step migration, with email preservation as the explicit focus</li>
</ul>
This plugin is not a fit for site owners who are not prepared to manage their own DNS. If your site is hosted on a fully-managed platform where DNS is controlled by the host, or if the prospect of changing nameservers is unfamiliar, consider hiring help for the Cloudflare migration before installing. Alternatively, simpler self-declaration age gate plugins may better match your operational comfort level — they are not real verification, but they also do not require infrastructure changes.
Why XYZ Age Verification:
<ul>
<li>Real verification, not self-declaration — Biometric liveness detection (iBeta Level 2 certified) plus optional government ID verification</li>
<li>Privacy by design — Biometric data is processed in real time and discarded immediately. Nothing is stored. No central database of faces or IDs</li>
<li>Smart escalation — Most adult visitors complete verification with a quick selfie. Only borderline cases are asked for ID, minimizing friction</li>
<li>Region-specific rules — Apply verification only where you need it, using Cloudflare’s geo detection. Configure different thresholds per country or US state</li>
<li>Free plan included — 100 verifications per month, no credit card required. Sign up directly from the plugin settings page</li>
<li>Cryptographically signed cookies — Visitors can’t bypass the gate with browser dev tools</li>
</ul>
Free plan included:
This plugin includes a free plan with 100 verification credits per month — no credit card required. Register directly from the plugin settings page with just your email. Credits reset monthly. Additional credit packs are available via PayPal for sites that need more capacity; your first purchase includes 300 bonus credits and switches your site to prepaid billing (credits do not expire or reset monthly).
How it works:
<ol>
<li>Visitors from configured regions are redirected to an age verification page.</li>
<li>They complete a face liveness check (Tier 1) or liveness plus government ID verification (Tier 2). Tier 1 produces a binary adult/not-adult result — it does not estimate age.</li>
<li>If the liveness check indicates the visitor may be a minor, the system automatically escalates to government ID verification. For age thresholds other than 18 (e.g., 21+ for alcohol or cannabis), Tier 2 is required because only an ID document provides a verifiable date of birth.</li>
<li>Upon a successful verification, a cryptographically signed cookie is set and the visitor is granted access.</li>
<li>All biometric data, selfies, and document images are discarded immediately after the verification completes — regardless of the result.</li>
</ol>
Requirements:
<ul>
<li>An XYZ Age Verification API key (register for a free plan directly from the plugin settings, or sign up at <a href="https://www.xyzinc.com/wordpress-plugin" rel="nofollow ugc">xyzinc.com</a>)</li>
<li>Cloudflare proxying — your domain’s DNS must be managed through Cloudflare’s network. A free Cloudflare plan provides everything the plugin needs (the geo detection headers <code>CF-IPCountry</code> and <code>CF-Region-Code</code>). See the “Cloudflare is required” section above for the implications of changing your DNS.</li>
<li>HTTPS enabled</li>
</ul>
External service — XYZ Age Verification API:
This plugin connects to the XYZ Age Verification API at <code>https://age-verify.xyzinc.com</code>, operated by XY Zinc (a brand of Chaos Unlimited LLC), to perform biometric liveness detection and government ID document verification. The plugin cannot function without this service — it is the core verification engine.
When a visitor triggers verification, the plugin sends the visitor’s country and state codes (derived from Cloudflare headers) to the API to create a verification session. The visitor then interacts directly with the verification UI hosted by the service. No biometric data passes through your WordPress server. The plugin polls the API for session status and receives only a pass/fail result.
<ul>
<li><a href="https://www.xyzinc.com/terms" rel="nofollow ugc">Terms of Use</a></li>
<li><a href="https://www.xyzinc.com/privacy" rel="nofollow ugc">Privacy Policy</a></li>
<li><a href="https://www.xyzinc.com/wordpress-plugin" rel="nofollow ugc">Service information</a></li>
</ul>
Complete feature list:
<ul>
<li>Two-tier verification: face liveness check, or liveness plus government ID</li>
<li>Region-specific rules with Cloudflare geo detection</li>
<li>Configurable minimum age per region (Tier 2 automatically enforced for thresholds above 18)</li>
<li>Exempt paths — leave specific URLs (homepage, privacy policy, registration, etc.) accessible to all visitors even from gated regions</li>
<li>QR code for mobile phone verification</li>
<li>Popup or same-device verification options</li>
<li>Real-time session status polling</li>
<li>Configurable bypass cookies for pre-verified users</li>
<li>Configurable fail-open or fail-closed behavior for API outages and credit exhaustion</li>
<li>Cryptographically signed verification cookies (HMAC-SHA256)</li>
<li>Server-side API key handling (never exposed to the browser)</li>
<li>Logged-in WordPress users automatically bypass the age gate</li>
<li>Built-in admin: manage regions, thresholds, and view verification history</li>
<li>Setup checklist and API health check on the settings page</li>
<li>Admin notices for common misconfigurations</li>
<li>Contextual help tabs with setup guide and troubleshooting</li>
<li>Compatible with standard WordPress page caches (not compatible with WP Rocket — see FAQ)</li>
</ul>
<h3>Planned Features</h3>
<h4>Media file protection — available now in XYZ Protect</h4>
Media files in <code>/wp-content/uploads/</code> are served directly by your web server and do not pass through WordPress PHP execution, so a free WordPress plugin cannot restrict them. <a href="https://www.xyzinc.com/protect" rel="nofollow ugc">XYZ Protect</a> is a separate licensed plugin that solves this problem using a Cloudflare Worker — every media request is authorized before the file is served. XYZ Protect can be combined with this plugin for sites that need both page gating and file-level protection.
<h4>Restricted path mode (planned)</h4>
The current model gates the entire site for visitors from configured regions, with the new Exempt Paths feature (2.5.4) allowing specific URLs to bypass the gate. A future release will add the inverse model — restricted paths — where the gate applies only to specific URL paths (e.g., <code>/mature/</code>, <code>/adult-content/</code>) and the rest of the site is accessible without verification.
<ul>
<li>Exempt paths (current) is the right model for sites that are mostly age-restricted with a few accessible pages (homepage, privacy policy, registration).</li>
<li>Restricted paths (planned) is the right model for sites that are mostly accessible with a small age-restricted section — for example, sexuality education sites, media outlets with adult sections, or e-commerce stores with age-restricted product categories.</li>
</ul>
<h4>Additional credit packs (available now)</h4>
Credit packs are available for purchase via PayPal at <a href="https://www.xyzinc.com/credits" rel="nofollow ugc">xyzinc.com/credits</a>. Purchased credits persist until used — they do not expire or reset monthly. Multiple packs can be stacked. Your first purchase includes a bonus of 300 credits and switches your site to prepaid billing, replacing the monthly free credit allocation.
<h3>Third-Party Libraries</h3>
This plugin includes the following third-party library:
<ul>
<li>QRCode.js — Client-side QR code generation
<ul>
<li>Source: <a href="https://github.com/davidshimjs/qrcodejs" rel="nofollow ugc">https://github.com/davidshimjs/qrcodejs</a></li>
<li>License: MIT</li>
<li>Files: <code>assets/js/qrcode.js</code> (unminified source), <code>assets/js/qrcode.min.js</code> (minified)</li>
</ul>
</li>
</ul>
No build tools are required. The library is included as-is from the upstream repository with a minor CSS modification (image display style changed from “block” to “inline-block” for QR code placement). The unminified source is included for review.

XYZ Age Verification

Real age verification for WordPress — biometric liveness and government ID, not a checkbox. Built for OFCOM, US state, and EU compliance.

Age Verify UK vs XYZ Age Verification