AnonymFlow
voyage-censureINFO

Australia, VPNs and Age Verification: What the FOI Documents Actually Reveal (2026)

Is Australia banning VPNs? FOI documents show the eSafety Commissioner expects platforms to block VPN workarounds around age verification. What the papers say, whether VPNs are still legal, and what it means for you.

By Eric Gerard · Editor · AnonymFlow3 min readPhoto: Pixabay

Around the world, age-verification laws keep running into the same obstacle: VPNs. New Zealand recently looked at restricting them and then ruled it out. Australia is taking the opposite approach. Documents released under freedom of information laws show its regulator does not want to ban VPNs outright, but does expect the platforms you use to detect and block them as part of enforcing age checks. Here is the honest version of what is going on.

What the FOI documents reveal

According to documents obtained by The Guardian under freedom of information laws, and prepared for Australian Senate estimates hearings, the eSafety Commissioner expects service providers to take "reasonable steps to prevent workarounds like VPNs" under the country's industry Codes. In plain terms, the regulator views VPN detection as one of the "reasonable steps" it expects tech companies to take when enforcing age limits.

This follows Australia's broader online safety rules. After requirements took effect in March 2026, the documents note that around 90% of the 30 most visited adult websites used by Australians had introduced age assurance measures for users. eSafety is now reviewing whether those sites are effectively stopping people from bypassing the checks with a VPN.

A smartphone showing a VPN app switched on and connected. Australia's regulator wants platforms to detect and block VPN use for age enforcement, not to ban VPNs outright.
A smartphone showing a VPN app switched on and connected. Australia's regulator wants platforms to detect and block VPN use for age enforcement, not to ban VPNs outright.

This is pressure on platforms, not a VPN ban

It is worth being precise, because headlines can blur this. Nothing in the documents bans you from using a VPN, and VPNs remain legal in Australia. The obligation lands on platforms and service providers: they are expected to take reasonable steps, potentially including VPN detection, so that age rules cannot be trivially sidestepped. The difference matters. A ban on using VPNs would be a blunt, hard-to-enforce law that hits banking, remote work and journalism. Pushing platforms to detect VPNs is a quieter, more targeted lever, and it is the one Australia is reaching for.

What it means for you

If you are in Australia, two things are true at once. Your VPN is still legal and still useful for privacy, for security on public Wi-Fi, and for accessing your own services while travelling. But if platforms increasingly detect and block VPN connections for age-gated content, a VPN becomes a less reliable way to get around those specific checks.

It is also worth being honest about what a VPN was ever going to do here. A VPN changes your network location. It does not prove or disguise your age. Where age verification asks for government ID, a bank card or a face scan, a VPN answers none of that. So even before any blocking, a VPN was never a clean "skip the age check" button - it only ever masked which country you appeared to connect from.

The bigger picture

Australia is part of a wider pattern. Across the UK, New Zealand and now Australia, age-verification rules keep colliding with the fact that VPNs exist. The responses differ: New Zealand pulled back from restricting VPNs, while Australia is leaning on platforms to detect and block them. Expect more of this tension, not less, as more governments roll out age checks. For everyday privacy, a reputable VPN remains a legitimate, legal tool - just not a magic key to age-gated content.

Editorial pick
4.6 / 5

Stay connected anywhere with NordVPN

Obfuscated servers for restrictive networks · 60+ countries · 30-day money-back

Deloitte audit 202430-day guarantee14M+ users
See the offer
Everything you need to know.

Frequently asked questions

Is Australia banning VPNs?

Not as such, and using a VPN remains legal in Australia. The point the FOI documents make is different: the eSafety Commissioner expects online platforms and service providers to take reasonable steps to stop people bypassing age checks with VPNs, and it treats VPN detection as one of those reasonable steps. So the pressure falls on platforms to detect and block VPN traffic for age enforcement, rather than on a law that bans you from running a VPN.

What do the FOI documents actually say?

According to documents obtained by The Guardian under freedom of information laws and prepared for Senate estimates, the eSafety Commissioner expects service providers, under the industry Codes, to take reasonable steps to prevent workarounds like VPNs. The regulator is also reviewing whether adult sites are effectively stopping users from bypassing the new age checks with a VPN. The papers note that around 90% of the 30 most visited adult sites used by Australians had introduced age assurance measures.

Can a VPN bypass Australia's age checks?

Sometimes, and less reliably over time. A VPN changes your apparent location, so if a site applies rules purely by detected country a VPN might avoid a country-specific prompt. But if platforms are pushed to actively detect and block VPN connections, that gets harder. And crucially, a VPN does nothing to answer an age check that asks for ID, a bank card or a face scan - it only masks your network location, not who you are.

Are VPNs still legal in Australia?

Yes. Using a VPN is legal in Australia, as it is in most democracies, and VPNs remain mainstream tools for privacy, security on public Wi-Fi and remote work. The current debate is about platforms detecting and blocking VPN use for age enforcement, not about outlawing VPNs for ordinary users.

How is this different from New Zealand?

New Zealand recently ruled out restricting VPNs after a backlash. Australia is moving the other way: rather than proposing a VPN ban, its regulator is pressing platforms to treat VPN detection and blocking as part of complying with age-verification rules. Same underlying tension, opposite regulatory response.