Reddit is rolling out ID verification or Face Scans for "NSFW" content in the EU, Norway and Sweden. The age verification is processed by Persona. Some users in Norway, Sweden and other EU countries are already seeing it also in mental health subreddits flagged as NSFW.
Users in Norway, Sweden, and other EU countries are reporting that Reddit has started prompting them to verify their age to access NSFW-marked content and subreddits. The verification is being processed through Persona, the same third-party KYC vendor Reddit uses in the UK under the Online Safety Act, and the same company we have covered before in the context of Claude's identity verification rollout. Persona has structural and funding ties to Peter Thiel, and Thiel's Palantir is a company European governments have been systematically rejecting over data sovereignty concerns throughout 2026. The data Persona processes during verification includes your government ID document, facial biometric data from a selfie, your ID number and date of birth, and geolocation inferred from your IP address. Reddit says it stores only a pass/fail result and your birthdate. Persona says it retains uploaded images for no more than seven days.
These are the same categories of assurances every KYC provider offers, and they say nothing about what happens during those seven days, who has access, or what a breach looks like, and we have seen enough KYC breaches across Discord and other platforms to know the risk is not theoretical.
This appears to be a testing phase ahead of broader EU enforcement. The CJEU ruling from June 16 gave France and other member states explicit legal authority to require age verification on platforms regardless of where those platforms are based. The European Commission has been pushing member states to have age verification infrastructure operational by the end of 2026. Reddit rolling this out quietly in the EU, Norway and Sweden now, rather than waiting for formal legal mandates, is almost certainly a compliance positioning move ahead of what is coming continent-wide. Several users have noted that mental health subreddits, harm reduction communities, and other NSFW-tagged but non-pornographic content is also being caught behind the verification wall, which is exactly the over-broad enforcement pattern privacy advocates have warned about since these laws were first proposed.
The workaround right now is a VPN set to a country without current enforcement, which removes the EU IP trigger that activates the verification prompt. The more important response of course is not participating in the verification flow at all if you are prompted, because this is explicitly described as a testing and data collection phase, and platform compliance decisions are influenced by how many users actually complete the process versus how many drop off. Every person who hands over their ID normalizes the infrastructure and makes the next rollout easier to justify. Beyond the immediate workaround, this is the moment where the age verification rollout stops being something happening to other platforms in other countries and starts being something affecting the specific communities, subreddits, and daily browsing habits of people in this group directly.