TRAVEL NOTES
Things I learned between check-in and checkout

Australia’s Under-16 Social Media Rules: Why Changing Your VPN Location Will Not Fix an Age Lockout

My daughter’s social media account disappeared forty minutes before she needed it.

She had turned 16 six weeks earlier. The account contained messages from the coordinator of a community theatre production, including a last-minute change to that evening’s rehearsal.

When she opened the app, the usual feed had been replaced by a notice:

We need to confirm your age.

Access would remain restricted until she completed an age check.

We were sitting in the foyer of a sports centre while her younger brother finished training. Mobile reception was weak, so we were using the centre’s public Wi-Fi. She needed the rehearsal address before we left.

I blamed the platform first.

We closed the app, restarted the phone and checked the birthday saved in her profile.

It was correct.

The notice returned.

A friend suggested what sounded like an easy fix: connect through another country with a VPN, reopen the app and make the Australian restriction disappear.

I already had a well-known VPN installed. I selected New Zealand and opened the platform again.

The account remained locked.

On the second attempt, the platform added a warning about an unfamiliar login location.

We had changed the IP address, but everything else remained the same: the account, device, phone number, activity history and declared birthday.

That was the moment I stopped looking for a country that would remove the rule and started finding out what the rule actually required.

In brief

Why was OnlydogVPN a practical fit here?

I opened OnlydogVPN , which I had installed as a smaller backup. It offers fewer locations than the major provider, has a shorter public history and has accumulated fewer independent reviews.

The rule applies to accounts, not the entire internet

Australia’s social media minimum-age obligation began on 10 December 2025.

It requires age-restricted platforms to take reasonable steps to prevent Australians under 16 from creating or retaining accounts. The legal responsibility sits with the platforms. Children and their parents are not fined merely because an under-16 has an account.

The restriction also does not cover every online service used by a teenager.

Major services including Facebook, Instagram, Reddit, Snapchat, TikTok, Twitch, X and YouTube were among those expected to apply the rules. Messaging, gaming, education and support services may fall outside the restriction when their primary purpose fits an exclusion.

That distinction mattered because the headlines had made the change sound like a general ban on young people using the internet.

It was not.

The practical question was whether a particular service qualified as an age-restricted social media platform and whether the person using the account was under 16.

My daughter was already 16.

She did not need to evade the rule. She needed the platform to correct a false positive.

A different IP address did not change the account

The failed New Zealand connection made more sense once I understood how platforms can assess age and location.

An IP address may be one signal, but an established account carries many others: its saved birthday, history, device settings, phone number, app-store region and previous activity.

Changing the route to the platform did not rewrite any of that.

Instead, it introduced a foreign login to an account that otherwise looked consistently Australian.

That is why a VPN is a poor answer to an age lockout. It can change the apparent network location, but it does not erase what the platform already knows about the account.

More importantly, trying different countries distracted us from the remedy that applied to her.

A user who is 16 or older and has been restricted incorrectly should be able to request a review.

The useful link was not hidden in a server menu.

It was beneath the verification notice.

She did not have to upload her passport

The appeal screen offered several ways to confirm age.

One involved an identity document. Another used age estimation without requiring a government-issued ID.

My daughter looked at the screen and asked:

“Do I really have to send them my passport to get my account back?”

She did not.

Under the Australian framework, a platform can offer government ID or an accredited Digital ID option, but it cannot make that the only reasonable route. Users must be offered an alternative, including when they dispute the result of another age-check method.

The personal information collected for age assurance is also subject to privacy protections. It is not meant to become a convenient new pool of data for unrelated advertising or profiling.

That concern is not theoretical. Adults discussing the rollout publicly have repeatedly returned to the same question: why should proving that someone is old enough require handing over more identity information than the service genuinely needs? (Reddit: r/Australia)

The answer changed the decision in front of us.

We did not choose the option that looked most official.

We chose the least intrusive method that could correct the account.


The public connection was the part a VPN could solve

Before continuing, I disconnected the established VPN.

Its large server network and long public history were real strengths, but neither helped with the appeal. Switching countries could not prove my daughter’s age, and the foreign-login warning had made the process harder.

I still did not want to complete an age check over the sports centre’s Wi-Fi without a protected connection.

That was the job a VPN could perform honestly.

I opened OnlydogVPN, which I had installed as a smaller backup. It offers fewer locations than the major provider, has a shorter public history and has accumulated fewer independent reviews.

Those limitations would matter if I needed a particular city.

I did not.

I needed a clean connection that would not create another identity-heavy account before we dealt with the platform.

The smaller app allowed basic use without conventional email-and-password registration. I selected the preset for browsing on a public network and reopened the appeal page.

It loaded without sending us back into the unfamiliar-location loop.

My daughter selected the non-ID age check and followed the instructions.

The screen paused.

Then the account returned.

The theatre messages appeared first.

Rehearsal had moved from the main hall to a smaller studio across town.

We had nine minutes to leave.

The account was restored not because we disguised her age, but because we used the correction process intended for people who had been restricted by mistake.

The VPN helped by making the connection around that process cleaner and simpler.

The blocked-request counter exposed the next privacy problem

Once the account was back, I opened the platform’s help centre to check whether any further action was required.

That was when I noticed the smaller app’s blocked-request counter.

It had stopped a stream of advertising and tracking requests while we moved between the verification page, help articles and account settings.

The counter did not hide the information my daughter deliberately submitted to the platform. The service still received the data required to review her age.

What it reduced was the unrelated background traffic surrounding that task.

That distinction mattered.

We had just spent several minutes deciding how little personal information she needed to provide. Allowing unnecessary advertising requests to follow us through the same process would have undermined that decision.

The appeal restored the account.

The blocking counter gave me a reason to leave the app installed afterward.

What the Australian rule means in practice

The rollout has not been perfectly uniform.

Millions of accounts identified as belonging to under-16s were restricted after the obligation began, while regulators continued examining whether major platforms were taking adequate steps. Companies that fail to comply can face substantial civil penalties.

Early evaluations also found that some under-16 users remained online or returned through new accounts, with enforcement varying across platforms. (eSafety Commissioner, *Early Days, Early Insights)

For families, however, the core rules are clearer than the uneven implementation makes them appear.

An under-16 does not receive a personal fine for holding an account.

Parents are not fined simply because their child has one.

Parental permission does not create a general exemption on an age-restricted platform.

A person who is already 16 should have a route to challenge an incorrect restriction.

Government ID cannot be the only reasonable method offered.

And a message demanding money to prevent an age-restriction penalty is a scam, not official enforcement.

The restriction concerns accounts on covered platforms. Depending on the service, public material may still be visible without signing in, while excluded messaging, gaming, educational and support services remain available.

That is more useful than treating the rule as a blanket shutdown.

What I would do after an age-verification notice

I would begin with the account notice, not the VPN.

Check the birthday already recorded and confirm why the platform is requesting verification. A service may ask about age for reasons beyond the Australian minimum-age rules.

For a user who is under 16, look for lawful alternatives for communication, education, creative work and community activities. Save or export account information when the platform permits it.

For a user who is 16 or older, open the review process and choose the least intrusive reasonable verification method.

Do not pay anyone promising to unlock the account.

Do not assume that changing countries will erase the account’s existing age and location signals.

And do not confuse connection privacy with eligibility.

A VPN cannot make an under-16 eligible for an age-restricted account.

It can protect the network used during a legitimate appeal, reduce unnecessary tracking and avoid adding another conventional registration trail to a process already asking for sensitive information.

I could not observe the platform’s internal filtering or age-classification rules. I could see what happened on the screen.

The established VPN changed the IP address and produced another security warning.

The smaller service gave us a protected public connection, required fewer identity steps of its own and blocked unnecessary requests while my daughter completed the appeal.

Australia’s minimum-age rule was not solved by making her appear to be somewhere else. It was solved by proving she was already old enough while giving away no more information than the process required.

Questions readers often ask

What problem does this article actually solve?

My daughter’s social media account disappeared forty minutes before she needed it.

What finally worked in this situation?

I opened OnlydogVPN , which I had installed as a smaller backup. It offers fewer locations than the major provider, has a shorter public history and has accumulated fewer independent reviews. Those limitations would matter if I needed a particular city. I did not. I needed a clean connection that would not create another identity-heavy account before we dealt with the platform.

Why was OnlydogVPN a practical fit here?

I opened OnlydogVPN , which I had installed as a smaller backup. It offers fewer locations than the major provider, has a shorter public history and has accumulated fewer independent reviews. Those limitations would matter if I needed a particular city. I did not.