Under the hood of facial age estimation

profile picture Sofi Summers 3 min read
Man doing facial age estimation with the icons representing 18+, no photos, no masks, photo, no image stored.

Since the UK Online Safety Act came into force on Friday 25th July, there has been a lot of discussion about how effective age checks are. 

Facial age estimation has been approved by Ofcom as a high assurance method for online age checks. It’s a quick, private and effective way to confirm if someone is above or below an age threshold. 

Each facial age estimation is quick and simple – taking around one second. This has sparked conversation when talking to businesses, press, regulators and governments – one of the most striking comments we’ve heard when showing them the technology is: “is that it?”. 

Well, yes – but in that second, there’s an awful amount happening behind the scenes, with our anti-spoofing technology playing a critical role.

 

What happens to complete a facial age estimation check

There are broadly four important steps to a facial age estimation check:

  • Image capture
  • Age estimation
  • Anti-spoofing checks
  • Image deletion

Image capture

The first step to a successful age assurance check is a good quality image. Yoti has an automated face capture module that prompts the user to frame their face for an optimal result. There is then no further action required of the user, like further movements, or the requirement to repeat words. Face capture automatically captures the best image for a successful age check. This improves accessibility. 

Age estimation 

We then break down that image into pixels – which is essentially a series of numbers. We can then analyse that with a mathematical model using our machine learning algorithm, which is able to produce a reliable age result from that data. We return only the result required, for example, ‘over 18’. We do not know who the person is, and neither does the platform.

Anti-spoofing checks

An equally important question is, how secure is the process? There’s little point in estimating the age of a face accurately if it’s not a real face in front of the camera. This is why it is important to use a combination of technologies to offer a high level of assurance. 

An attempt to present an image, mask or video is often called a presentation attack. To overcome this we use our NIST 2 certified liveness technology. This ensures that the person undertaking the check is a real person and not someone wearing a mask, or presenting a picture or video of another (older or younger) person to the camera. 

Image deletion

The image of the user is then deleted and no data is stored. The only thing we pass over to the platform is a ‘Yes/No’ answer as to whether the person meets the required age threshold or not. It is impossible for the platform, and for Yoti, to know the identity of the person from facial age estimation

 

Why use facial age estimation

Facial age estimation is a practical and effective way of ensuring children can enjoy an online experience without being able to access inappropriate content. We have successfully performed over 850 million age checks to date, the equivalent to a tenth of the global population.  

Keep reading

One phone scanning the qr code on the screen of another

Digital ID for proof of age is coming. Here’s how to check it properly.

Millions of people are already using digital IDs to prove their age and identity, share their verified details with others or take more control over their personal data, all without needing a physical document.  Soon, they’ll also be able to use them as proof of age when buying alcohol in licensed premises in the UK (once the mandatory licensing conditions are updated). This includes pubs, bars, restaurants, nightclubs and supermarkets. That’s a big shift in how age-restricted sales work and it’s why having a fast, reliable and low-friction way to check IDs matters for your business.    How businesses

8 min read
person using phone

Updates to the UK MLRs have just changed the game for digital identity

For years, the UK has talked about digital identity as the key to faster onboarding, reduced fraud, better customer experiences, and stronger compliance. And yet, in much of regulated industry, the day-to-day reality has barely shifted. Why? Because compliance culture doesn’t move on optimism. It moves on defensible certainty. Until now, most compliance officers have been understandably risk-averse. Not because they dislike digital identity, but because they know what happens when a control fails: remediation programmes, supervisory challenge, awkward audit findings and reputational consequences.  Even when the Joint Money Laundering Steering Group (JMLSG) referenced digital identity in June 2020,

8 min read
An image showing that Yoti is certified as an Identity Service Provider (IDSP), Attribute Service Provider (ASP), Orchestration Service Provider (OSP) and Holding Service Provider (HSP).

More ways to use and accept Digital IDs in the UK

We’ve hit an important milestone in our journey to make our trusted and accessible digital IDs easier to use in the UK.  Yoti has achieved Gamma (v0.4) certification under the UK Digital Identity and Attributes Trust Framework (UKDIATF). In practice, that means we’re now certified across four key roles: Identity Service Provider (IDSP) Attribute Service Provider (ASP) Holding Service Provider (HSP) Orchestration Service Provider (OSP) It confirms that Yoti meets the UK Government’s highest standards for secure, trusted digital identity services. It also means that we’re ready to support everyday use cases, like accessing age-restricted services and buying alcohol,

6 min read