Age verification for alcohol, vape, and restricted checkout
A checkbox is not verification. If you sell alcohol, tobacco, vape, cannabis, or adult goods online, you need a checkout gate that proves age before payment, stores an audit trail on the order, and keeps no buyer passports on your servers.
AgeOnce fires only when a cart contains restricted SKUs, verifies for the exact threshold, and returns a signed outcome and Audit ID. Ordinary orders stay friction-free.
Checkout gate flow
Buyer adds items to cart
General merchandise stays open. No friction on unrestricted orders.Restricted SKU detected
Alcohol, vape, or any tagged category flags the cart for verification.Verify once at checkout
AgeOnce runs ID + liveness, returns a signed age outcome for the threshold.Payment proceeds with proof
Order stores verification status, threshold, timestamp, and Audit ID.Ecommerce age verification for restricted goods in 2026
Who must act
Online retailers selling alcohol, tobacco, vape, cannabis, adult goods, or other age-restricted SKUs to UK, EU, or US customers.
Where to gate
Before checkout completes on carts containing restricted items, not only at account signup or with a birth-year checkbox.
Regulatory pressure
US state laws set 21+ for alcohol and tobacco; many EU markets use 18+. Payment partners and marketplaces expect real verification.
Recommended approach
Product-level checkout gates with privacy-first proof: signed threshold, timestamp, and Audit ID stored on the order, not passport images.
Restricted categories and their age thresholds
Thresholds differ by product and market. The US sets 21+ for alcohol and tobacco, while many EU markets use 18+. Tag each category with the right minimum and let the gate enforce it per cart.
Alcohol & wine
18+ across much of the EU.
Tobacco & vape
Nicotine and e-liquid included.
Cannabis & CBD
Where legal; rules vary by state.
Adult products
Mature retail and content bundles.
Knives & blades
18+ in UK and many EU markets.
Supplements & meds
Age-limited formulas and quantities.
Store-wide popup vs product-level checkout gate
A store-wide age popup nags every visitor and proves nothing. A product-level gate verifies the buyer only when the cart actually needs it, then keeps the proof on the order.
Store-wide age popup
Blocks every visitor before they can browse the catalog
Self-declared birth date, trivial for a minor to fake
Hurts conversion on unrestricted merchandise
No verification proof stored against the actual order
Product-level checkout gate
Fires only when the cart contains a restricted SKU
Verifiable ID + liveness for the exact age threshold
General merchandise checks out with zero friction
Signed outcome, threshold, and Audit ID saved on the order
Checkout proof is not delivery proof
Verifying age at checkout stops underage orders from being placed. For alcohol, tobacco, vape, and cannabis, some markets and carriers still require an adult signature at handover. Log the two events separately so an auditor can see exactly where each check happened.
Checkout verification
Confirms the buyer met the age threshold when the order was placed. Stored with threshold, timestamp, and Audit ID.
Delivery proof
Adult signature or ID check at handover for alcohol, tobacco, vape, or cannabis where the carrier or jurisdiction requires it.
Guides and integration paths
Gate restricted checkout without losing sales
Run the live demo on a restricted cart. Product-level gates, signed age proof, and an Audit ID on every order. No buyer passports or selfies stored on your side.
WordPress setup guideRestricted ecommerce age verification FAQ
Many retailers need both layers. Checkout verification stops underage orders from being placed. Delivery proof such as adult signature may still be required for alcohol, tobacco, vape, or cannabis in specific markets. Keep those events separate in your audit log.
Yes. Product-level rules trigger verification only when the cart contains age-restricted items. Ordinary merchandise continues through checkout without an extra step. See the WooCommerce age verification hub for plugin setup and order audit fields.
Common categories include alcohol, tobacco, vape and nicotine products, cannabis where legal, knives and solvents in restricted markets, supplements with age limits, and adult goods. Thresholds vary: 18+ in many EU markets, 21+ for alcohol and tobacco in much of the US.
Keep verification outcome, minimum age threshold, timestamp, order or cart reference, and Audit ID. Avoid storing ID images, selfies, or full dates of birth in your ecommerce database. That reduces GDPR and breach risk while giving regulators evidence the checkout was gated.
Yes. After the first privacy-first check, returning customers can use a signed age token or quick reverification. That matters for subscription boxes, repeat vape orders, and loyalty customers who would abandon checkout if asked for a passport every time.