Discord and Roblox picked opposite strategies for the same problem, and both bets came due this week. Discord postponed its global age-verification rollout for the second time on February 24, 2026, pushing a plan originally due in March to “the second half of 2026” after a user revolt over privacy. Roblox did the opposite: it went first, went mandatory, and went fast. On July 30, 2026, Roblox reported second-quarter earnings that beat on revenue but guided to the first year-over-year bookings decline in the company’s history as a public company – and the stock posted its steepest single-day drop on record.
The two companies are now the clearest natural experiment yet in how Discord age verification policy compares with Roblox’s, and in how age-assurance mandates more broadly reshape a gaming platform’s business, its legal exposure, and its relationship with users. Layer in Twitch’s inclusion in Australia’s under-16 social media ban, Steam’s continued reliance on an unverified birthdate field, and a Senate committee vote on the Kids Online Safety Act that landed just one day before this story, and the gaming industry is living through a genuine regulatory reckoning in real time. This is what the data shows, what each platform is actually doing differently, and what it means for the rest of 2026.
Discord’s Age Verification U-Turn, Explained
Discord announced its “Teen by Default” safety overhaul on February 9, 2026, alongside a plan for mandatory global Discord age verification beginning in March. The backlash was immediate. Users objected to submitting facial scans or government identification to a platform many use for private, informal communication, and “Discord alternatives” became a recurring topic across forums and social media within days of the announcement.
On February 24, 2026, Discord co-founder and CTO Stanislav Vishnevskiy confirmed to the Associated Press that the company was postponing the global rollout until the second half of 2026, with no update expected before July. Discord says it will use the extra time to add more verification options, increase vendor transparency, and publish technical documentation explaining exactly how the system works – commitments that were largely absent from the original March plan. The company’s own numbers suggest the practical impact will be limited even once the rollout resumes: Discord says more than 90% of its 200-million-plus monthly active users will never be prompted to verify their age at all, because its internal safety systems already infer enough from account signals.
“After hearing feedback from our users, we’ve made the decision to delay the global rollout of age assurance until the second half of 2026 to expand verification options, increase vendor transparency, and publish detailed technical documentation, while continuing to meet regulatory requirements where needed.”
Discord, official press release
Inside the Backlash: A Breach, a Deadline, and a Trust Collapse
Discord’s timing could not have been worse. On October 3, 2025 – four months before the age-verification announcement – Discord disclosed that a third-party customer service vendor, 5CA, had been breached. According to Discord’s own account, the incident exposed government-ID photographs for approximately 70,000 users, along with names, usernames, email addresses, limited billing metadata, and support-ticket transcripts. Discord was explicit that this was a breach of a vendor’s systems, not of Discord’s own infrastructure, and that full card numbers, passwords, and message history were not affected.
The attackers told a different story. A group identifying itself as Scattered LAPSUS$ Hunters claimed to have taken 1.5 terabytes of data covering 5.5 million users, including more than 2.1 million government-ID photos – a figure roughly 30 times larger than Discord’s official count. Neither number has been independently reconciled, and the gap illustrates a recurring problem in breach disclosure: victim companies and extortion groups have opposing incentives to under- or overstate scope, and outside verification is rarely possible. What is not in dispute is that the breached data included ID photos submitted specifically for age-related verification, which meant Discord announced a plan to collect more of exactly the data type that had just leaked, from the same broad vendor ecosystem, four months later.
Vishnevskiy later acknowledged the company had not adequately explained itself the first time around.
“missed the mark”
Stanislav Vishnevskiy, CTO and co-founder, Discord
Discord’s New Playbook: Vendors, On-Device Scans, and Who’s Exempt
Discord’s original plan leaned heavily on Persona, a vendor also used by Roblox and Reddit for identity and age checks. Discord has since ended that partnership, saying Persona could not guarantee that facial age-estimation scans would be processed entirely on-device, meaning biometric data would never need to leave a user’s phone. In its place, Discord is now building a multi-vendor stack: k-ID for compliance orchestration, Veratad for document verification where it’s unavoidable, Stripe for payment-based age signals, and an in-house on-device facial-estimation model as the primary, privacy-preserving default.
Discord’s public commitments this time include immediate deletion of submitted identity documents after verification, a promise not to use age-assurance data for advertising, and a pledge to keep a user’s age-group status invisible to other users. Whether that satisfies regulators is a separate question – Discord still has legal obligations under the UK’s Online Safety Act and similar frameworks that don’t pause simply because the global consumer-facing rollout has slipped.
Roblox Went First – and Just Had Its Worst Trading Day on Record
Roblox took the opposite approach to Discord: announce early, test regionally, and reach full mandatory coverage on a fixed schedule. Facial age-estimation checks began rolling out in November 2025 and reached mandatory, platform-wide coverage by January 2026, gating any player who wants to chat outside their own age group. The rollout drew far less public backlash than Discord’s – but the business cost showed up seven months later, in the numbers.
Roblox reported second-quarter fiscal 2026 results on July 30, 2026. Revenue came in at roughly $1.47 billion, up 36% year-over-year and ahead of expectations. Bookings, the metric Wall Street watches most closely for Roblox, told a different story: $1.6 billion, up just 8% year-over-year and at the low end of the company’s own guidance range. The real shock was forward-looking – Roblox guided to third-quarter bookings of $1.58 billion to $1.65 billion, which implies a 14% to 18% year-over-year decline, and the company withdrew full-year guidance entirely, accelerating a planned shift to quarterly-only forecasts.
The stock reaction was severe. Shares fell 2.9% on the day of the earnings release, then plunged another 26.9% in the next trading session – a combined two-day decline of nearly 30% and, by multiple market trackers’ accounts, the steepest single-day drop in the company’s history as a public company. Management attributed the bookings shortfall primarily to younger users migrating toward games with lower per-hour monetization, plus deliberate changes to Roblox’s recommendation algorithm intended to favor long-term retention over near-term spending – not explicitly to the age-verification system itself. That distinction matters for anyone trying to draw a clean causal line from “mandatory age checks” to “bookings miss”; the company has not made that connection publicly, even as outside observers are already drawing it.
Daily Active Users Have Fallen for Three Straight Quarters
Roblox’s daily active user count peaked at 152 million in the third quarter of 2025 and has declined every quarter since: 144 million in Q4 2025, 132 million in Q1 2026, and 123 million in Q2 2026 – a 19% drop from the peak. Year-over-year, the picture looks healthier: Q2 2026’s 123 million DAUs is still up 10% from Q2 2025’s 112 million, and hours engaged rose 5% to 29 billion. Roblox also disclosed that 27% of its age-checked users are now confirmed to be adults, a figure that rises to roughly a third in the United States – a demographic data point the company didn’t have before the verification system existed.
| Quarter | Daily Active Users | Bookings (YoY growth) | Revenue (YoY growth) |
|---|---|---|---|
| Q2 2025 | 112 million | – | – |
| Q3 2025 (peak) | 152 million | +51% | +56% |
| Q4 2025 | 144 million | +30% | +38% |
| Q1 2026 | 132 million | +21% | +41% |
| Q2 2026 | 123 million | +8% | +36% |
| Q3 2026 (guided) | Not disclosed | -14% to -18% | Not disclosed |
Roblox’s Legal Reckoning: 170 Lawsuits and a Securities Class Action
Roblox’s age-verification system is also the subject of expanding litigation on two entirely separate fronts. The first is a consolidated child-safety docket: the U.S. Judicial Panel on Multidistrict Litigation centralized dozens of federal lawsuits into In re: Roblox Corporation Child Sexual Exploitation and Assault Litigation (MDL No. 3166) in December 2025, under Chief U.S. District Judge Richard Seeborg in the Northern District of California. The docket has grown steadily – roughly 85 cases at initial consolidation, 146 by May 2026, about 162 by June 2026, and 170 as of July 2026 – as families continue filing claims alleging the platform failed to prevent grooming and exploitation of minors.
The second front is a securities class action from shareholders, not families. Multiple law firms are representing investors who allege Roblox misled the market about how age verification would affect engagement, pointing to a February 5, 2026 earnings call where CEO David Baszucki said the company was “very excited and proud” of the rollout. The class period runs October 30, 2025 through April 30, 2026 – covering an earlier ~18% stock decline that wiped out about $6.7 billion in market value, which this site covered separately at the time. The lead-plaintiff deadline falls August 7, 2026. The July 30 earnings plunge covered in this piece is a distinct, later event, though both stem from the same age-verification rollout.
The New Jersey Case That Complicates the “It Works” Narrative
On July 30, 2026 – the same day as Roblox’s earnings report – a new lawsuit was filed alleging that Roblox’s facial age-estimation system misclassified a 15-year-old New Jersey girl as an adult, placing her account into an adult age bracket where she subsequently received sexually explicit communications from another user. The claim alleges she has suffered lasting emotional distress. The case is now part of the broader MDL 3166 docket, and it underscores the core limitation of any age-estimation system: it produces a probabilistic guess, not a verified fact, and a false negative places a minor directly into the pool of interactions the system was built to prevent.
Twitch Gets Swept Into Australia’s Ban – Discord and Roblox Don’t
Regulators aren’t treating every gaming-adjacent platform the same way, and Australia’s under-16 social media ban is the clearest example. The law, in effect since December 10, 2025, covers ten platforms: Instagram, Facebook, Threads, Snapchat, TikTok, YouTube, X, Reddit, Twitch, and Kick. Australia’s eSafety Commissioner explicitly excluded Discord, Roblox, Steam and Steam Chat, GitHub, WhatsApp, Messenger, Google Classroom, and YouTube Kids, reasoning that a platform only qualifies if online social interaction is its “sole or a significant purpose” – a test Twitch’s live chat and follower system met and Discord’s server-based structure, for now, has not.
Twitch responded by changing its global minimum-age policy on December 9, 2025, shifting from a flat 13-and-up rule to a jurisdiction-based minimum that automatically adopts a stricter local age floor where one exists. It has also begun rolling out on-device facial age-estimation scans for UK users, restricting mature-rated streams to verified adults. The net effect is a genuinely uneven regulatory map: three platforms with overlapping teen user bases – Discord, Roblox, and Twitch – currently face three different legal obligations, arrived at three different verification methods, and are experiencing three very different levels of user and investor backlash.
How the Major Gaming Platforms Compare on Age Verification
Laid side by side, the four largest gaming-adjacent platforms are running four genuinely different experiments in age assurance, from Roblox’s fully mandatory biometric check to the delayed Discord age verification system to Steam’s decades-old, unverified birthdate field.
| Platform | Primary Method | Mandatory Since | Global Rollout Status | Regulatory Trigger |
|---|---|---|---|---|
| Roblox | On-device facial age estimation | January 2026 | Fully mandatory, live | State/EU child-safety pressure, internal policy |
| Discord | Behavioral signals + facial estimation/ID/card (only if flagged) | Delayed to H2 2026 | Postponed globally; UK/Australia obligations still apply | UK Online Safety Act, EU DSA |
| Twitch | Jurisdiction-based minimum age + facial scans (UK) | December 2025 (policy); UK scans rolling out | Partial, region-led | Australia under-16 ban, UK Online Safety Act |
| Steam | Self-declared birthdate (unverified); card check (UK only) | Not mandatory globally | Minimal; UK card-check layer only | UK Online Safety Act (partial) |
Steam’s Quiet Non-Approach to Age Verification
Valve has largely stayed out of the age-verification arms race. Steam’s account creation flow still asks for a self-declared birthdate that, per longstanding rating-agency rules, cannot be persistently stored or reused as proof of age beyond a single session – closer to a content-gate prompt than an identity check, and trivially bypassed by entering a fabricated year. The exception is the UK, where Valve added a credit-card step for adult-rated content to comply with the Online Safety Act. There’s no indication Steam plans a broader biometric or document-based rollout, leaving the platform with the largest PC gaming user base also carrying the lightest verification burden – a gap regulators and competitors are likely to notice.
KOSA Advances in the Senate, One Day Before This Story
The regulatory backdrop to all of this shifted again just before this article published. The Senate Commerce Committee advanced the Kids Online Safety Act (KOSA) with a unanimous vote on August 5, 2026. The bill isn’t new – an earlier version passed the full Senate 91-3 back in July 2024, only for the House to never take it up – but this Congress’s version is moving on both chambers simultaneously: the House already passed its own related legislation, the Kids Internet and Digital Safety (KIDS) Act, in June 2026, though the two chambers’ bills still diverge on a key point, a “duty of care” standard for how platforms must design features used by minors.
KOSA’s definition of a “covered platform” is broad enough to include any online service, video game, messaging app, or streaming platform that minors are reasonably likely to use – language that would sweep in Discord, Roblox, Twitch, and Steam simultaneously, regardless of how each currently classifies itself. If KOSA and the KIDS Act are reconciled into a single federal law, the patchwork this article describes – different rules for different platforms based on how regulators currently define “social media” – could collapse into one uniform, federally mandated standard for the first time.
Historical Context: From COPPA to the Age-Assurance Arms Race
None of this happened in a vacuum. The Children’s Online Privacy Protection Act (COPPA), passed in 1998 and enforced by the FTC, is still the foundational U.S. child-privacy law, but it was built for static websites and never required identity verification – only notice and parental consent for data collected from children under 13. Self-declared birthdates, the mechanism Steam still relies on, are a direct legacy of that era. What changed is the last three years of international law: the UK’s Online Safety Act, the EU’s Digital Services Act, and now Australia’s under-16 ban have each pushed platforms toward provable, technical age assurance rather than an honor-system checkbox. Discord’s and Roblox’s predicament – one delayed and rebuilding trust, the other paying a market-cap price for moving first – is what happens when that pressure arrives at two companies with different risk tolerances at nearly the same time.
Market Impact: What Investors and Privacy Advocates Are Watching
For investors, Roblox’s Q2 print reset the market’s model of the company from a pure growth story to one with a real, quantifiable safety-compliance cost – and Wall Street is now pricing in the possibility that other platforms face the same trade-off once the delayed Discord age verification rollout lands. Discord, still privately held after its own IPO valuation talks stalled earlier this year, has more room to absorb reputational damage than a public company reporting quarterly bookings, but less room to indefinitely delay compliance with UK and EU law. For privacy advocates, the 5CA breach is the more durable concern: every vendor added to an age-assurance supply chain – Persona, k-ID, Veratad, Stripe, 5CA – is another potential point of failure for exactly the sensitive biometric and identity data regulators are now mandating platforms collect.
What Discord and Regulators Are Saying
Discord has been unusually direct in public statements about what went wrong the first time and what it’s changing.
“we will only expand globally after we’ve done the following: added more age verification options, increased vendor transparency, and published detailed technical documentation.”
Stanislav Vishnevskiy, CTO and co-founder, Discord
That framing – more options, more transparency, more documentation – is a direct response to the two loudest user complaints: that the original plan offered a single, invasive verification path, and that Discord had not clearly explained what data would be collected, by whom, or for how long. Whether it’s enough to avoid a repeat of February’s backlash when the rollout resumes in the second half of 2026 is, at this point, untested.
5 Predictions for the Rest of 2026
- Discord’s H2 2026 rollout slips again or launches narrowly. Expect a phased, region-first rollout (likely UK and EU markets first, to satisfy existing legal obligations) rather than the single global switch-flip the original March plan called for.
- Roblox’s Q3 2026 report confirms the first actual year-over-year bookings decline. The company has already guided to it; the open question is whether it lands inside or outside the 14–18% range, and whether management again avoids directly attributing it to age verification.
- KOSA and the KIDS Act do not fully reconcile into law before the end of 2026. The duty-of-care gap between the House and Senate versions is a substantive policy disagreement, not a drafting formality, and those historically take longer than one legislative session to resolve.
- At least one more major platform announces some form of age assurance. Steam is the most exposed by its current inaction – sustained EU/UK regulatory pressure on the rest of the industry makes its unverified-birthdate status increasingly conspicuous.
- The Roblox securities case and MDL 3166 produce at least one settlement or substantive court ruling within the next 12 months. With 170-plus consolidated federal claims and an active securities class action running in parallel, the discovery process alone is likely to surface internal communications that shape how every other platform in this piece talks publicly about its own age-verification tradeoffs.
For engineers, the tradeoff Discord and Roblox are navigating is ultimately a familiar risk-routing problem: how much verification friction to impose, on whom, and at what confidence threshold. A simplified, illustrative version of that logic looks roughly like this – not actual code from either platform, but representative of the on-device-first approach both say they’re moving toward.
// Illustrative only – not actual Discord or Roblox source code
function routeAgeCheck(user) {
const signal = onDeviceFacialEstimate(user); // never leaves device
if (signal.confidence > 0.9) {
return signal.likelyAdult ? ACCESS_FULL : ACCESS_TEEN_DEFAULT;
}
// Low-confidence estimate: escalate to a heavier, opt-in method
if (user.hasPaymentMethod) return verifyViaCardSignal(user);
return requestDocumentOrRetry(user); // last resort, vendor-processed
}Frequently Asked Questions
What exactly did Discord delay?
Discord postponed the global rollout of mandatory Discord age verification, originally planned for March 2026, to the second half of 2026, with no update expected before July. Existing legal obligations in markets like the UK and Australia are unaffected by the delay.
Why did Discord delay age verification?
CTO Stanislav Vishnevskiy said Discord “missed the mark” in explaining the original plan, which triggered significant user backlash – worsened by an October 2025 breach at third-party vendor 5CA that exposed government-ID photos submitted by roughly 70,000 users.
Is my data safe after the Discord breach?
Discord says the breach was confined to vendor 5CA’s systems, that full card numbers and passwords were not exposed, and that it has since ended its relationship with 5CA. Discord has also committed to immediately deleting identity documents after verification going forward, rather than retaining them.
Does Roblox’s age verification actually work?
It catches the large majority of cases, according to Roblox’s own data, but it is a probabilistic estimate, not a guarantee. A July 2026 lawsuit alleges the system misclassified a 15-year-old as an adult, illustrating the false-negative risk inherent to any estimation-based system.
Why did Roblox stock crash if revenue grew 36%?
Investors reacted to forward guidance, not the reported quarter. Roblox guided to a 14–18% year-over-year bookings decline for Q3 2026 and withdrew full-year guidance, which overshadowed the reported revenue growth.
Is Discord covered by Australia’s social media ban?
No. Australia’s eSafety Commissioner explicitly exempted Discord, Roblox, and Steam from the under-16 ban that took effect December 10, 2025, while Twitch and Kick are included.
What is KOSA and will it become law in 2026?
The Kids Online Safety Act would create a legal duty of care for platforms, including video games and messaging apps, that are reasonably likely to be used by minors. The Senate Commerce Committee advanced it unanimously on August 5, 2026, but it must still be reconciled with the House’s KIDS Act before becoming law – a process unlikely to finish before year-end.
Will Steam eventually require age verification?
Valve has not announced plans for a global rollout beyond its existing UK card-check requirement. Steam’s continued reliance on a self-declared, unverified birthdate makes it an outlier among major platforms as regulatory pressure builds elsewhere.
Related Coverage
- Roblox Age Verification Wipes $6.7B, Stock -18% [2026]
- Discord IPO Stalls at $8.5B, Below Microsoft’s $12B [2026]
- 100+ Addiction Suits Hit Roblox, Xbox, PlayStation [2026]
- Twitch vs Kick: Kick Pays $4.74, Twitch Pays $3 [2026]
- Tencent Gaming Stock Sinks 7%, Worst Drop Since 2025 [2026]
For more coverage of the platforms, hardware, and storefronts shaping the gaming industry, visit the gaming section on shattered.io.
