The Infrastructure to End Online Anonymity Is Already Being Built. You're Helping.

The Department of Homeland Security sent hundreds of subpoenas to Google, Meta, Reddit, and Discord over the last six months. They wanted names, email addresses, phone numbers—anything that could identify the people behind accounts that criticized Immigration and Customs Enforcement.

Some companies handed over the data. Others gave users 10 to 14 days to fight the subpoena in court before complying. That's already happening, right now, while Congress considers making it the default.

Twelve bipartisan "child online safety" bills are advancing in the House. They'd require age verification to access social media, app stores, even adult content online. Half of US states already mandate some version of this. California's embedding it at the operating system level—Apple and Google would verify every smartphone user before they could download apps.

The infrastructure to end online anonymity isn't a future threat. It's being built right now, platform by platform, state by state.

Who's Actually Behind the Push

The bills have support across the political spectrum. Elon Musk endorsed KOSA. Meta CEO Mark Zuckerberg told a court that Apple and Google should verify smartphone users at the OS level. The Digital Childhood Alliance—a group warning about "Big Tech"—is secretly funded by Meta.

That's the tell. When Facebook backs age verification laws and suggests Apple implement them, it's not about protecting kids. It's about offloading the liability while everyone else builds the surveillance infrastructure.

Discord tried to roll out mandatory age verification globally in February. Users would submit selfies or government IDs to access certain features. The backlash was instant. Discord delayed until later this year, claiming it would add "more verification options and transparency."

The delay doesn't change the direction. It's still coming.

The Government Is Already Using It

DHS says it has "broad administrative subpoena authority" and argues it's keeping ICE agents safe in the field. Steve Loney, an ACLU attorney who represented people targeted by the subpoenas, said the government is "taking more liberties than they used to. It's a whole other level of frequency and lack of accountability."

Some platforms notified users. Discord withdrew some subpoenas after owners sued. But Google, Meta, and Reddit complied with others.

This is what happens when anonymity becomes conditional—when platforms can identify you, they will, whether you consent or not, whether a judge signed off or not.

The Data Doesn't Get Deleted

Age verification vendors promise privacy. They say they process identity data and return only a pass/fail signal to platforms. But Socure, one of the largest verification vendors, confirmed it retains adult verification data for up to three years in certain cases—gaming, fraud prevention, compliance documentation.

Discord disclosed a data breach in January 2026 that exposed ID images for 70,000 users through a compromised third-party service. The IDs were supposed to be secure. They weren't.

Molly Buckley, an analyst at the Electronic Frontier Foundation, said age verification ties "the most sensitive and immutable data—names, faces, birthdays, home addresses—to online activity." Once that link exists, it's permanent.

Even when vendors promise to delete data, lawyer Heidi Howard Tandy warned: "If they say they're holding it for three years, that's the minimum amount of time. I wouldn't feel comfortable trusting a company that says, 'We delete everything one day after three years.' That is not going to happen."

It's Already Normal in Half the Country

Roughly half of US states now require age verification for social media or adult content access. Virginia, California, Texas—laws are spreading faster than platforms can comply. Companies are racing to implement systems before penalties kick in.

Virginia's law faced a federal court block last month on First Amendment grounds. The state attorney general said they'll "use every tool available to ensure Virginia's children are protected from the proven harms of unlimited access to these addictive feeds."

The pattern: pass the law, dare companies to resist, let courts sort it out while the infrastructure gets built anyway.

Joe Kaufmann, global head of privacy at identity-verification platform Jumio, said the trend is "definitely toward some kind of persistent verification of a user's age." A digital proof that travels with you across platforms.

Tandy compared it to Disney accounts—once your age is verified, it follows you everywhere in the ecosystem. No need to check again. Just a permanent identity layer tied to every click.

Whistleblowers Are the Collateral Damage

The Electronic Frontier Foundation and ACLU have both warned that mandatory identity verification would devastate whistleblowers, activists, and anyone who relies on anonymity to criticize power.

Journalists can't protect anonymous sources if platforms are legally required to know who everyone is. Domestic abuse survivors can't maintain safety accounts if their legal name is on file. Political dissidents in authoritarian countries can't organize if logging in requires a government ID.

The Intercept called it "one of the most sweeping rollbacks of civil rights in recent history."

DHS is already testing the limits. If you criticized ICE anonymously in the last six months, there's a decent chance your real name is in a government file now.

The Shift Nobody's Talking About

This isn't a debate about whether kids should be on social media. It's a structural change to how the internet works.

For 30 years, the default was anonymity with optional verification. Banks, government services, high-security platforms could require ID. Everything else was pseudonymous by design.

The new default: prove you're an adult to access anything, and that proof follows you forever.

Buckley said lawmakers could address online harms through comprehensive privacy laws that limit data collection for everyone. But that's not the direction Congress is moving.

Instead, they're building the surveillance layer first and calling it child protection. Once the infrastructure exists, the use cases expand.

What Happens Next

Discord delayed its global rollout. Virginia's law got blocked in court. Some companies are resisting.

But the trend is clear. Half of US states already require some form of age verification. The federal bills have bipartisan support. The infrastructure vendors are scaling up. Platforms are preparing to comply.

When Disney, Meta, and the government all want the same system—just for different reasons—it's going to get built.

The only question is whether anyone stops it before the last anonymous account disappears.