Ofcom fined the operator of the pornography site fapello.com £630,000 on 9 July 2026, its stiffest age assurance penalty yet and the clearest signal so far that missing an age check duty is now a direct financial liability, not a paperwork risk.
The Confirmation Decision, issued under section 132 of the Online Safety Act 2023, comes in two parts. Ofcom imposed £600,000 for breaching the section 12 duty to use highly effective age assurance, plus a further £30,000 for ignoring a legally binding request for information during the investigation. The regulator opened the case in November 2025 after Fapello’s UK traffic climbed sharply, apparently absorbing users who had left larger sites once those rivals switched their age checks on. Fapello has since geoblocked the UK entirely.
That traffic pattern is the part payments teams should read twice. The short term reward for skipping compliance was a spike in volume. The end state was a six figure penalty and the total loss of the UK market. Non-compliance did not preserve revenue. It deferred the reckoning and raised the bill.
Fapello is not an isolated case. It is the largest in a widening run of Ofcom penalties. The regulator fined adult operator YoungTek Solutions £600,000 in May and had already levied £1.35m on another site before that, and on the day it confirmed the Fapello decision it opened a fresh investigation into provider Bit Hive over an age check method it worries may not be highly effective. That cadence is the real signal for acquirers. Age assurance enforcement is now a standing programme, not a single headline, and every adult merchant on the book sits inside its scope.
Why it matters
An Ofcom record is now a priced liability. For adult merchants and the acquirers underwriting them, it is no longer an abstract reputational worry. It lands straight in the risk file: a six figure fine, a UK revenue cliff from geoblocking, and a documented history of ignoring a regulator. Underwriters price exactly that. It is the same underwriting math that already makes skipping age assurance cost you before you process a payment. A penalty on record plus a geoblocked settlement flow is how a merchant becomes a MATCH candidate. Age assurance has moved from a content problem to a bankability test.
The record also exposes a harder edge. The fine on its own does not always compel action. Ofcom has acknowledged that one firm it penalised £1m never even responded, and message board 4chan is still refusing to pay a £520,000 penalty. When an offshore operator can absorb the paper loss, the enforcement that actually bites is the part that travels through the payment rails: the loss of card acceptance and the market that geoblocking takes with it. Ofcom even lists credit card checks among its approved ways to verify age, which puts payments on both sides of the rule, as the compliance tool and as the pressure point. For underwriters, the penalty notice is the floor on the cost, not the cost itself.
The UK regime is only the leading edge. The age verification rules now reshaping adult payment accounts are spreading state by state in the US too, and each new mandate widens the compliance surface an acquirer has to underwrite. A £630,000 line item is what that surface looks like when a merchant gets it wrong.
- Ofcom, “Investigation into the provider of fapello.com’s compliance with the duty to prevent children from encountering pornographic content through the use of age assurance,” Ofcom enforcement page, 9 July 2026.
- Liv McMahon, “Porn site company fined £630,000 over failed age checks,” BBC News, 9 July 2026.
- First reported by XBIZ.