Discord just announced that starting in March 2026, all users worldwide will face mandatory age verification. The system will use facial scanning, government ID uploads, and AI-powered behavioral analysis to determine who gets full access to the platform.
The timing couldn’t be worse. Just four months ago, Discord’s age verification vendor suffered a breach that exposed roughly 70,000 government IDs, including selfies and other sensitive documents. Now the company wants everyone to hand over the same type of data.
Users aren’t having it. Within 48 hours of the February 9 announcement, Discord-related traffic to data deletion services surged 350%. Matrix, TeamSpeak, and other alternatives are reporting server overloads as communities scramble to migrate.
How the System Works
Discord’s new verification regime uses three layers of identity checking.
The first is AI-based age inference. The platform will analyze your account tenure, device data, and activity patterns to estimate your age. Users who don’t generate enough data for the algorithm - or who the system flags as potentially underage - face additional verification steps.
The second layer is facial age estimation. You’ll be asked to submit a video selfie that analyzes facial features to guess your age. Discord insists this happens on-device and that the footage isn’t retained.
The third layer is government ID upload. If the facial scan doesn’t satisfy the system, you’ll need to upload official identification. Discord uses third-party vendors to process these documents - k-ID globally, and Persona in the UK and Australia.
Anyone classified as under 18 faces content filters, direct message limitations, and reduced access to features like Stage channels.
The October Breach Nobody Forgot
Discord won the Electronic Frontier Foundation’s “2025 We Still Told You So Breachies Award” for a reason. Attackers compromised the company’s customer support system and accessed approximately 70,000 government IDs, selfies, and associated personal data that users had submitted through existing verification processes.
The very same documents Discord now wants from everyone.
“History shows that data - especially this ultra-valuable identity data - will leak,” the EFF wrote, “whether through hacks, misconfigurations, or retention mistakes.”
Making matters worse, one of Discord’s verification vendors just exposed its own systems. Researchers discovered that Persona - which handles ID verification for Discord, OpenAI, Roblox, and Lime - had left its frontend code publicly accessible on a US government-authorized server. The exposed files revealed that Persona performs 269 distinct verification checks, runs facial recognition against watchlists, screens for “politically exposed persons,” and searches adverse media across 14 categories including terrorism and espionage.
Persona can retain IP addresses, browser fingerprints, government ID numbers, phone numbers, names, and facial images for up to three years.
Discord announced it will stop using Persona following the exposure. But the fundamental problem remains: once you hand over your government ID to any platform, you’re trusting every system it touches to stay secure forever.
The Exodus Is Real
The user response has been swift and severe.
TeamSpeak reports its servers are “completely overwhelmed” by fleeing Discord users. Matrix, the decentralized chat protocol, is seeing what it calls an “incredible surge” in registrations, with hosting capacity maxed out in multiple regions. A smaller platform called Stoat has crashed repeatedly under the migration load.
Reddit threads are filled with users announcing Nitro subscription cancellations. “I will not be uploading my face or ID to a database that I know is not secure,” one user wrote. Another, who had been on the platform since 2015, said they were ending their subscription over the company’s direction.
Discord’s global head of product policy, Savannah Badalich, acknowledged the backlash in an interview with The Verge. “We’re not doing biometric scanning or facial recognition. We’re doing facial estimation,” she said, drawing a distinction many privacy advocates consider meaningless. “The ID is immediately deleted.”
She admitted the company expects user attrition but expressed confidence: “We’ll find other ways to bring users back.”
Why This Matters
Discord is effectively building an identity database of its 200+ million users. The company’s reassurances about on-device processing and immediate deletion are technically possible but impossible to verify. And the track record of age verification systems in general - and Discord’s vendors specifically - gives no reason for confidence.
The facial estimation technology itself has documented problems. The EFF notes these tools are “notoriously unreliable, particularly for people of color, trans and nonbinary people, and people with disabilities.” Getting flagged as potentially underage means submitting more personal data, creating a discriminatory feedback loop.
For marginalized users - LGBTQ+ youth, abuse survivors, political dissidents - the requirement to link a verified legal identity to their communications undermines the pseudonymity that made Discord useful in the first place.
What You Can Do
If you’re leaving Discord:
Delete your data first. Discord stores complete message histories, server memberships, connected third-party accounts, and behavioral patterns. Use the platform’s download-your-data feature to see what you’ve accumulated, then use the official deletion tools or a service like Redact to clear it before closing your account.
Consider your alternatives. Matrix offers end-to-end encryption and decentralized hosting - your data lives on whichever server you choose, not a single company’s infrastructure. TeamSpeak and Mumble are more limited but work for voice chat. Telegram and Signal handle encrypted messaging but aren’t Discord replacements for community features.
Export your server communities. Tools exist to archive server content and member lists before migrating. Coordinate with server owners and moderators - an organized move is easier than individual departures.
If you’re staying on Discord:
The EFF’s advice: minimize what you submit, verify retention policies before uploading anything, look for evidence of independent security audits, and be cautious about background details in any photos you share.
There’s no perfect option here, only tradeoffs. But Discord has made those tradeoffs considerably worse.