Steam enforces Australian age verification via credit cards — debit card glitches and low credit adoption alienate core gamers, privacy-first mindset leads to dearth of options that may hinder consumers
Credit cards work, but debit card support is spotty and conditional.
Today is September 9, and the significance of the date for Australian consumers is that, by law, buying online apps and games now requires an over-18 age verification step. The local law isn't specific about the exact type of verification, only that it offers "appropriate age assurance measures." Valve is complying by asking for a bank card rather than government ID or a biometric check. The problem in the land down under is that while credit cards seemingly all work, debit card support is spotty and conditional.
This situation isn't unique, as it's basically a repeat of the same existing scenario in the United Kingdom. Valve's privacy-minded approach is laudable, as a bank card only links a payment method to a name and address. Meanwhile, a government ID is a more dangerous document if it gets leaked; face scans are quite fallible and revealing, and biometrics are intrinsic to the person and not replaceable if exposed — unlike bank cards, which can be canceled and swapped in minutes.
However, having a card check as the only verification option is causing problems, and many users are already asking for other means of verification, even if they're more invasive, citing Xbox and Sony's services as more accommodating.
Since credit cards in Australia (and the UK) can only be issued to adults, they work fine for Steam verification. Debit cards, on the other hand, can be carried by minors, and they're only valid for age checks under specific conditions. For now, that seems to be those (a) belonging to the Mastercard network, which introduced its own global automatic age verification check on June 2, 2026, and (b) for which the issuing bank flagged the card product as adults-only. The transaction firm only passes the answer to "is the buyer an adult?" back to the merchant (in this case, Steam), without exposing an actual date of birth.
A quick harnessing of user reports, mainly from Reddit posts, seems to indicate that debit Mastercards from Commonwealth, Westpac, and Macquarie appear to work, while those from Bendigo, St. George, Revolut, ANZ, and most Visa cards seem to fail the check. Note that this is an evolving situation, so the situation may have changed by the time you're reading this.
The demographics of credit card ownership definitely don't help matters. Unlike the U.S., where credit cards are the default method of purchase, only about 45% of Australian buyers and 65% of UK punters own one. Perhaps most importantly, within the 18-24 age demographic, only 25% to 30% own a credit card — precisely the people who buy the most games and are the most affected. For both user satisfaction and business reasons, it's seemingly desirable that Steam add verification alternatives.
Follow Tom's Hardware on Google News, or add us as a preferred source, to get our latest news, analysis, & reviews in your feeds.
Get Tom's Hardware's best news and in-depth reviews, straight to your inbox.
Bruno Ferreira is a contributing writer for Tom's Hardware. He has decades of experience with PC hardware and assorted sundries, alongside a career as a developer. He's obsessed with detail and has a tendency to ramble on the topics he loves. When not doing that, he's usually playing games, or at live music shows and festivals.
-
jmcgaw Of course no teen in Oz will be clever enough to use a parent's card for age verification.Reply -
helper800 Reply
That would be the parents problem that their teen is breaking the law.jmcgaw said:Of course no teen in Oz will be clever enough to use a parent's card for age verification. -
circadia Reply
the point is that age verification is ineffective.helper800 said:That would be the parents problem that their teen is breaking the law. -
TerryLaze Reply
Not if the point of it is to have someone to point the blame at...circadia said:the point is that age verification is ineffective.
Gov. is covered because they enforced age ver.
Steam is covered because they implemented age ver.
Now the parent(s) is the only person with blame... -
helper800 Reply
Yes, but this would remove all doubt from a reasonable mind that the criminal intent is there on behalf of the underaged person, and it would point to the parents ineffectiveness to prevent them from doing such a thing.circadia said:the point is that age verification is ineffective.