Australia's eSafety Commissioner has stepped into the growing controversy over Steam's new age verification requirements, confirming it is now "engaging with Valve" after widespread complaints from Australian gamers. The response comes after Valve began requiring Australian Steam users to verify they are 18 or older before purchasing adult-rated games, a move that has exposed a messy collision between privacy protection and regulatory compliance.

Why Steam's Age Verification Sparked Backlash

Valve rolled out mandatory age checks for Australian accounts in line with local online safety rules, which require platforms offering adult content to apply "appropriate age assurance measures." The law itself doesn't specify exactly how companies must verify age, leaving that decision to individual platforms.

Valve's chosen method: linking a credit or debit card to a Steam account as proof that a user is an adult. On paper, this avoids the more invasive alternatives used elsewhere, such as uploading a government ID or submitting to facial scanning through third-party age verification services. In that sense, Valve's approach was arguably the more privacy-conscious option available.

In practice, it has created a different problem entirely. A significant number of Australians, particularly younger adults and those who simply prefer debit cards, don't hold a credit card at all. That has left legitimate adult users locked out of purchases they're entitled to make, while also raising questions about why a company would ask gamers to hand over sensitive financial account details just to confirm they're old enough to buy a game.

The Privacy Trade-Off Nobody Asked For

The core tension here isn't just about inconvenience. It's about what kind of data trade-off users are being asked to accept in the name of age assurance. Credit card verification links a financial instrument to an entertainment account, creating a new category of sensitive data tied to a gaming profile. For a company that already stores substantial personal and payment information on its users, this raises the stakes around what happens if that data is ever mishandled or exposed.

That concern isn't hypothetical for Valve specifically. The company has previously had to notify customers about a data exposure incident affecting purchasers of Steam hardware after a breach tied to logistics partner CEVA. Incidents like that underscore why users are wary any time a platform asks for more financial or identity data than a transaction strictly requires, even when the stated goal is child safety.

Age verification systems built around financial instruments also assume that owning a credit card is a reliable proxy for adulthood, which isn't necessarily true, and that the absence of one implies something about a user's age, which also isn't true. That mismatch is largely what has driven Australian regulators to take a closer look at how Valve implemented the requirement.

eSafety Commissioner's Response and What Happens Next

According to the report, Australia's eSafety Commissioner confirmed it is now in direct contact with Valve regarding the rollout. While the office has not detailed specific changes it's demanding, its involvement signals that the current implementation, credit card verification as the sole method, may not fully satisfy the intent of the underlying safety law, even if it technically complies with the letter of it.

This puts Valve in a familiar position for platforms navigating age assurance rules: caught between regulators who want effective verification and users who want minimal data exposure, with no perfect solution that satisfies both goals simultaneously.

What This Means For You

If you're an Australian Steam user who has run into this verification wall, you're not alone, and the issue is now on regulators' radar rather than something you have to resolve on your own. That said, it's worth being deliberate about how you handle any request to link financial data to a gaming account:

  • Only enter card details directly through Steam's official verification flow, never through a third-party link or email prompt claiming to help you "verify faster."
  • Review your Steam account's linked payment methods periodically and remove any card you no longer want tied to the account once verification is complete.
  • Keep an eye on official Valve and eSafety Commissioner communications for updates, since the verification method itself may change as this engagement continues.
  • If you don't have a credit card, avoid third-party workarounds promising instant age verification. These often carry far greater privacy risk than the platform's own system.

The Bottom Line

Steam's age verification requirement was meant to keep Australia's platform compliant with online safety law, but the credit-card-only approach has instead highlighted how difficult it is to balance privacy, accessibility, and regulatory demands in a single system. With the eSafety Commissioner now engaging directly with Valve, Australian users may see changes to how age verification works on Steam in the coming weeks. Until then, the safest move is to interact only with official verification channels and stay cautious about any service offering a shortcut around them.