Spain's age verification fails to block top porn sites

Only Spanish-based adult sites comply with digital ID

What use is an age-verification ID if the major adult websites aren't based here? The Government presented a credential system on July 1 to check ages before accessing adult content, and an inconvenient fact emerged immediately: the country's ten most visited sites are foreign and thus exempt from the obligation. The measure is sold as a barrier against minor access, which the Executive estimates starts between 9 and 11 years old. For now, that barrier is only as high as a company's registered office.

Data from analytics firm SEMRush for May clarifies the landscape. Pornhub accumulated more than 150 million visits in Spain and is domiciled in Luxembourg. XVideos reached 110 million and operates from the Czech Republic, the same country where XNXX is registered, with 31 million. None respond to Spanish requirements. Nor have any shown intention to do so.

Which adult sites escape blocking and why

The criterion separating what is possible from what is desired is location. A company domiciled abroad cannot be forced to apply a verification system that doesn't exist in its legal framework, and the plan only covers entities established in Spanish territory. The list of the most visited—Pornhub, XVideos, XNXX, xhamster, hentaila, onlyfans, amateur, toroporno, and vercomicsporno—is practically the list of those left out.

The consequence is almost arithmetic: if only a couple of names remain with national structure, the incentive to move headquarters to Ireland, Andorra, or any more convenient jurisdiction is obvious. This has been done before for less uncomfortable reasons. No one needs a big law firm to understand that blocking only reaches those who stay put.

How the digital age verification ID works

The system distributes 30 credentials: three per website, each allowing up to ten uses. They can be renewed as often as needed and do not limit visit numbers or time spent. Adults over 18 don't lose access; they simply pass through a door with a bouncer.

The design aims to prove majority without handing full ID details to every site, a balance between privacy and control that sounds reasonable until you look at the cost of building and maintaining it. That’s where the other debate begins.

Antiestéticar of digital ID: from porn to gateway

Some analysis argues that adult content is just the first case and that identification infrastructure will eventually extend to other areas: access to benefits, financial operations, content moderation. The same system verifying age today could verify anything tomorrow, and this precedent was already attempted under the guise of antiestéticar.

The official response is that verification is specific and changes nothing for adults. Not everyone is convinced: some see any identity card applied to browsing as the start of tracking everyone’s internet activity. They call it "Una manola".

VPNs, proxies, and why blocking is bypassed in two minutes

Anyone with basic tech savvy knows VPNs or proxies render filtering ineffective. The issue isn't technical but about critical mass: most people use their phone’s default browser and won’t install anything extra. If that majority complies, the measure has statistical effect but no real impact.

There’s another lesser-known argument. Adult content is a significant part of interconnection business between operators, distribution networks, and CDNs: terabytes of traffic bought and sold, with penalties for failing agreed service levels. Inserting filters where such contracts exist isn’t free.

Who pays for the system and who profits from building it

Building a state identification app costs public money, raising the question of who gets paid. Memories of other emergency health tools, developed hastily and rarely used afterward, fuel skepticism. So does the recurring suspicion in digitalization debates about tech contracts awarded quickly to friendly consultancies.

Criticism doesn’t deny the problem exists. It questions the instrument, timeline, and bill. With the only two domestic sites heading abroad, the ID remains like a nightclub bouncer on an empty street: strictly applied to those who don’t need it, never reaching those it should stop.