Social Media Age Verification Regulation Becomes Target for Scammers

The regulation published in the Official Gazette on October 10, which bans social networks from providing services to children under 15 and introduces an age verification process, has paved the way for phishing attacks by cybercriminals. Experts stated that citizens should be cautious against fake verification links sent via SMS, WhatsApp, and e-mail.

In accordance with the regulation published in the Official Gazette, social network providers are banned from offering services to children under the age of 15 starting November 1, 2026. While a transition period until March 31, 2027 is granted for the compliance of existing accounts, the age verification process made mandatory for account openings has been targeted by cybercriminals. Scammers are sending fake notifications via SMS, WhatsApp, and e-mail channels by impersonating official institutions and platforms.

Users are being directed to phishing sites through urgent messages such as "Verify your age to keep your account open" or "Your account will be closed if you do not verify." TR ID numbers, passwords, bank details, and SMS confirmation codes shared on these pages can fall into the hands of scammers. Official age verification, on the other hand, is carried out solely through cryptographic digital tokens generated via the e-Government Gateway, without directly sharing identity information with companies. The Presidency's Directorate of Communications and cybersecurity experts emphasized that identity or bank information should not be given through any links, and transactions should only be made through official channels.