Steam's Australian age verification hits a wall: credit cards work, debit cards don't, and gamers are frustrated
Valve's privacy-conscious approach to Australia's new age verification requirement relies on bank cards, but spotty debit card support and low credit card adoption among young players are creating friction.
Credit cards work, but debit card support is spotty and conditional
Starting September 9, Australian consumers face a legal mandate: purchasing apps and games online now demands proof of being 18 or older. The legislation itself doesn't prescribe the exact verification method, only requiring "appropriate age assurance measures." Valve has chosen to implement this through bank card verification rather than government identification documents or facial recognition technology. The catch is that while credit cards appear to function reliably across the board, debit cards present an inconsistent picture.
This challenge mirrors what already unfolded in the United Kingdom. Valve's choice to prioritize privacy deserves recognition—a bank card links only payment information to basic personal details like name and address. Government-issued ID documents pose greater risks if compromised; facial scans carry accuracy concerns and expose sensitive biometric data; and biometric information cannot be revoked or replaced if stolen, unlike credit cards, which can be canceled and reissued within minutes.
Yet relying exclusively on card-based verification is generating real problems. Players are already requesting alternative verification methods, even those with greater privacy implications, pointing to how Xbox and PlayStation handle the process as more flexible examples.
Why debit cards are failing the check
In Australia and the UK, credit cards are restricted to adults, making them suitable for Steam's verification system. Debit cards, however, can be held by minors, and they only qualify for age verification under particular circumstances. Currently, this appears limited to two conditions: (a) cards operating on the Mastercard network, which rolled out its own global automatic age verification system on June 2, 2026, and (b) cards that the issuing bank has specifically marked as adult-only products. The payment processor returns only a yes-or-no answer to "is this buyer an adult?" to the merchant without revealing the actual date of birth.
Examining user experiences shared primarily on Reddit reveals a fragmented landscape. Debit Mastercards from Commonwealth, Westpac, and Macquarie appear to pass verification, while cards from Bendigo, St. George, Revolut, ANZ, and most Visa-branded debit cards are being rejected. This situation remains fluid and may shift as systems are adjusted.
Credit card ownership gaps compound the problem
The distribution of credit card ownership in Australia and the UK exacerbates the issue. Unlike the United States, where credit cards dominate consumer transactions, only roughly 45% of Australian consumers and 65% of UK consumers hold a credit card. The situation becomes more acute when examining the 18-24 age bracket, where just 25% to 30% possess a credit card—the very demographic that purchases games most frequently and bears the brunt of this restriction. From both a user experience and commercial standpoint, introducing additional verification pathways on Steam appears necessary.
Source: Tom's Hardware