Selling age-restricted goods online carries legal obligations that go well beyond a tick-box at checkout. Knives, vapes, alcohol and other restricted categories each carry their own statutory age verification requirements, and enforcement against non-compliant online sellers has intensified in recent years.
Why 'I confirm I am 18' checkboxes aren't enough
A simple self-declaration checkbox at checkout, without any further verification, does not meet the legal standard expected for most age-restricted goods sold online in the UK. Trading Standards and, for knives specifically, the Home Office have both taken enforcement action against retailers relying solely on an honesty-based checkbox, particularly following high-profile prosecutions after age-restricted items were used to cause harm and were traced back to online sellers with inadequate checks.
The direction of travel in UK law is clearly toward requiring genuine, verifiable age checks — either at the point of sale online, or at the point of delivery, or both — rather than accepting a customer's unverified word for it.
Selling knives and bladed articles online
The Offensive Weapons Act 2019 introduced specific requirements for the remote sale of knives to UK addresses: sellers must ensure the knife cannot be delivered to a residential address unless a person is present at the point of delivery to verify the recipient is 18 or over, using photo ID, and that the packaging does not indicate a knife is inside. Couriers refusing delivery without valid ID present, and returning the item to the sender rather than leaving it, is now standard practice for compliant retailers.
Vapes, e-cigarettes and tobacco products
It's illegal to sell vaping products, e-cigarettes or tobacco to anyone under 18 in the UK, whether the sale happens in a shop or online, and the Tobacco and Related Products Regulations impose additional restrictions on nicotine strength, packaging and advertising for these products specifically. Online sellers should implement a robust age verification step at account creation or checkout — commonly using a third-party age verification service that checks against credit reference or electoral roll data — rather than relying on checkbox self-declaration alone.
With UK legislation moving toward a phased generational ban on tobacco sales and tighter restrictions on vape flavours, packaging and disposable products, retailers in this category should treat compliance as an area requiring regular monitoring rather than a one-off setup, since the rules are actively evolving.
Alcohol sales and the Licensing Act 2003
Selling alcohol online requires a personal licence holder and, in most cases, a premises licence covering the location from which sales are authorised, under the Licensing Act 2003. Online alcohol retailers must have robust age verification at the point of sale and, similarly to knives, many retailers also verify age at the point of delivery via the courier, since a checkout-only check does little to prevent a minor from receiving a delivery addressed to someone else.
- Hold the required personal and premises licences before trading, not while an application is pending.
- Verify age at checkout using a recognised verification method, not just a date-of-birth field.
- Train or contract delivery couriers to check ID for alcohol deliveries where required by your licence conditions.
- Display licensing information and Challenge 25 policies clearly on your website.
Choosing an age verification method that fits your risk
Verification approaches range in rigour: a date-of-birth entry field is the weakest and easiest to falsify; a third-party digital age verification service checking against credit reference agency or other official data sources is considerably stronger and is what most compliance-conscious retailers in higher-risk categories now use; and physical ID checks at the point of delivery add a final layer that catches cases where checkout verification was circumvented. The right combination depends on the specific product category and its statutory requirements — knives and alcohol have the most explicit legal expectations, while other adult or restricted categories may rely more heavily on checkout-stage verification.
Building a defensible compliance record
Keep records of the age verification method used for every restricted-goods order, including timestamps and the outcome of any third-party verification check, so you can demonstrate reasonable steps were taken if a sale is ever challenged. Review your process whenever legislation changes — restricted goods categories in the UK have seen frequent regulatory updates in recent years — and treat a Trading Standards enquiry as a serious matter requiring prompt, well-documented cooperation rather than something to deprioritise.
Where This Fits Into Your Wider Strategy
As with most things covered in Risk, Security & Compliance, age verification and restricted goods compliance for UK online sellers works best when it's revisited periodically rather than decided once and forgotten. This connects directly with Public Liability, Cyber Insurance and Goods-in-Transit Cover for Online Retailers, which walks through the practical detail.
For related reading: This connects directly with Training Warehouse Staff and Managing Shift Schedules Safely: A UK Compliance Guide, which walks through the practical detail. This connects directly with Factory Audits and Social Compliance: Understanding BSCI and SEDEX, which walks through the practical detail.