Daily Grind: Would I Really Hand Over My ID Just To Play A Game?

The moment “show us your ID” stopped being hypothetical

My breaking point wasn’t China’s MMO curfews or some abstract law in a country I don’t live in. It was a simple prompt on a platform I actually use every single day.

I opened Discord one night to catch up with my guild, and there it was: talk of age verification rolling out, facial scans, government IDs, third-party “trust and safety” vendors I’d never heard of, all wrapped in this soft, PR-flavored language about “protecting young users.” Around the same time, Twitch was quietly telling new affiliates to upload their faces and government IDs to a third-party verifier just to get paid.

Suddenly this wasn’t a thought experiment. It wasn’t just another “Daily Grind: would you hand over your ID?” column in the abstract. It was me, my documents, my face, my hobby… and a giant unspoken threat: no compliance, no access.

And I had this very simple, very visceral reaction: absolutely not for a damn video game.

I’ve been playing online games long enough to remember Blizzard’s Real ID fiasco in 2010. Blizzard genuinely thought forcing real names onto their forums was going to civilize the community. Instead, it triggered a nuclear-level backlash, doxxing concerns, mass opt-outs, and a humiliating walk-back. I remember sitting there, staring at the announcement, thinking, “You want me to post under my real name on the same internet where people send death threats over loot rolls?”

Real ID taught me something that hasn’t changed: the people running these platforms dramatically underestimate what they’re asking us to risk, and they dramatically overstate how much safer it’ll actually make anyone.

The sales pitch: “It’s for safety, just give us everything”

Let’s be clear about the narrative here. Governments pass “online safety” laws, usually framed around protecting kids from porn, gambling, and predatory adults. Platforms panic about fines and lawsuits. Then they scramble to bolt on “age verification” features: ID uploads, selfies, facial recognition, credit card checks, reusable digital identity wallets, all funneled through third-party vendors with names that sound reassuring and anonymous.

In the UK, those Online Safety rules are already in force. Services that host adult content or “harmful” material are required to prove users’ ages with something “highly effective” – which, in practice, means shoving people towards ID scans, face analysis, or some other invasive workaround. Once one big region does it, global companies don’t want two different systems, so the rest of us get dragged along for the ride whether our countries asked for it or not.

Discord, Roblox, console networks, even launchers and MMOs are all under pressure to prove they’re “doing something” about minors. And when regulators don’t care about the implementation details, the easiest answer is always the blunt instrument: “Upload your government ID,” or “Take a selfie so our AI can guess how old you are.”

The problem is that this stuff is simultaneously overpowered and utterly pathetic. Overpowered, because you’re handing biometric data and government-grade identifiers to companies whose security track records are, let’s be generous, mixed. Pathetic, because it’s trivially easy to bypass if you’re even slightly motivated – VPNs, borrowed accounts, shared devices, smurf accounts, you name it.

We’ve already seen what it looks like when a government goes all-in on this model. China’s MMO curfews for minors require real-name registration hooked to government ID databases and facial recognition checks, limiting young players to tiny windows of play each week. And what happened? People found ways around it. Accounts in parents’ names. Rented adult IDs. Black markets. The kids who really want to play find a way; the system mostly punishes the honest and the poor.

So when Western regulators now say “We must protect children, so show us your passport to access a chat room,” forgive me if I’m not convinced this is anything more than security theatre with an enormous privacy bill attached.

We’ve been here before: Real ID, but make it your passport and your face

The Blizzard Real ID debacle is burned into my brain as the moment I realized just how quickly a company could try to flip the table on player privacy.

Back then, it was “only” names. Blizzard wanted your real name to show up on forums and certain social features. It never even got as far as passports or facial recognition. And still, the fury was instant and justified. People working in sensitive jobs. Women who’d dealt with harassment. Queer players not out to their families. Ordinary folks who just didn’t want some pissed-off raid leader knowing exactly who and where they were.

Blizzard caved because the cost of enforcing it was higher than the benefit. But the mindset never really died. You can see the echoes in every system that treats pseudonymity as something suspicious, something to be “fixed” with “real identity.”

Fast forward to Roblox asking for facial age estimates or optional government IDs to access “mature” chat features, or Twitch telling affiliates to feed their data into some contractor’s biometric grinder, or MMO-curious kids in China forced to stare into a camera at bedtime to prove they’re not cheating the curfew. It’s all the same logic, just with more powerful surveillance tools.

And now, because of the UK, Australia, Brazil, and other countries pushing ID or biometric checks, everyone from Discord servers to GTA-style online lobbies is fair game for this stuff. Online safety regulators say “you have to be able to show us you’re keeping minors out,” and guess who becomes the guinea pig for ever more intrusive systems? Us. The players. The ones just trying to run dungeons with friends or argue about balance on Discord.

My red line: I won’t trade my passport for pixels

Let me be transparent about where I stand, because that’s the whole point of a question like “Daily Grind: would game platforms ever get your ID?”

If your online game, chat app, or MMO community demands a copy of my government ID or a live selfie scan just to participate, I’m out. Full stop. I don’t care how legendary the raid loot is. I don’t care how cracked the netcode is. Entertainment is not worth handing over data that I can’t ever truly take back.

There’s a massive difference between:

• Verifying identity to receive money (e.g., getting paid as a streamer, competing for real cash in tournaments, gambling, or cashing out items) – where governments have always insisted on KYC rules, and frankly I get it; and
• Verifying identity to simply log in and exist in a social or game space — which is where this starts to feel like social credit creep.

For the first category? Sure, I still don’t love it, but that’s a targeted risk I can evaluate. It’s a financial relationship with real-world liability. If I choose to chase money on Twitch or a gambling site that demands a passport, that’s on me. I can say no and walk.

For the second category? Hell no. I will not normalize “papers please” just to talk in an MMO lobby or join an 18+ channel on Discord. I will not pretend that funneling IDs and biometrics through a hazy chain of third-party “verification providers” is an acceptable cost of firing up voice chat with my guild.

And it’s not just paranoia. We’ve already seen age-verification vendors leak ID photos. We’ve seen companies promise they’ll “delete everything after verification” — promises you simply cannot audit from the outside. Even if one vendor is honest today, they can get acquired tomorrow by someone less ethical, or pressured by states who’d love a ready-made identity database.

I’ve watched this industry long enough to know that whatever data you hand over in 2026 will come back to haunt you in 2030 when some breach dumps it all over the dark web. Your passport number isn’t like a password you can reset. Your face definitely isn’t.

I’ve watched this industry long enough to know that whatever data you hand over in 2026 will come back to haunt you in 2030 when some breach dumps it all over the dark web. Your passport number isn’t like a password you can reset. Your face definitely isn’t.

The real “daily grind” is how much of yourself you’re asked to surrender

Here’s the part that really bothers me: this isn’t one giant leap into dystopia. It’s a million tiny concessions, a slow, grinding erosion.

First it’s “just your email.” Then it’s “just your phone number.” Then “just a credit card to confirm you’re an adult.” Then “just a selfie, we promise we’re not storing it.” Then “just link to your government digital ID wallet; it’s so convenient.”

Each step on its own feels arguable. Each step has some context where you could squint and say, “Yeah, OK, I can see why a parent or regulator would like that.” But in aggregate, it turns your gaming life — this thing that’s supposed to be an escape from the daily grind — into a heavily surveilled extension of it.

MMOs and online games have always been about trying on other identities. New names. New roles. New communities. Some of the most meaningful relationships in my life started with nothing more than a character name and a shared objective in a dungeon. That fragile pseudonymity is a big part of why those spaces worked at all.

When every account is welded to a passport and a biometric profile, you don’t just lose privacy. You lose the psychological freedom to experiment, to fail, to be weird, to walk away. You introduce this constant ambient pressure that mistakes in a game could bleed into your real life because the wall between them has been deliberately demolished.

And yeah, the “daily grind: would game companies go this far?” question isn’t theoretical anymore. They are. Some already have. The only real question now is which of us will say no when it crosses our personal line.

“But think of the children” isn’t a blank cheque

I’m not blind to the problems these laws claim to solve. I’ve seen creeps in MMO chats. I’ve seen kids spending money they don’t understand on loot boxes. I get why parents are desperate for tools that actually work.

The argument from regulators goes something like this: if we don’t require strong age verification, kids will slip into spaces that actively harm them. ID checks and face scans are a “necessary evil” to force platforms to take responsibility.

The problem is that we’re building sledgehammers where scalpels are needed. Strong parental controls at the OS level? Great. Separate child accounts with verifiable parental consent? Sure. Local device settings that limit playtime without mass data collection? Absolutely. These are tools that empower the people actually raising the kids, without creating massive centralized identity honeypots.

But slapping a universal “show us your government ID or stare into the camera” checkpoint in front of every MMO, Discord server, and social feature is lazy policy-making. It offloads the hardest problem — parenting in a digital world — onto unaccountable vendors and underpaid trust-and-safety teams, then pretends the job is done because a box got ticked.

If a system can be easily bypassed by any determined teenager with a VPN and 10 minutes of Googling, but still collects and stores millions of adults’ sensitive data along the way, it has failed on both axes: it’s not actually protecting kids, and it’s absolutely wrecking privacy.

How I’m adapting as a player (and what I refuse to do)

This isn’t just a rant; it’s changing how I actually play and what I’ll support with my time and money.

First, I vote with my logins. If an MMO or platform decides that basic participation requires my government ID or a biometric scan, I’m gone. Uninstalled, account closed where possible, data deletion requested. There are too many games in the world — including single-player, co-op, and private server options — to chain myself to one that treats me like a potential criminal by default.

Second, I pay attention to who is holding my data. A platform telling me, “We do an age check on your device and don’t upload a face scan anywhere” is not the same as “Upload your passport to this third-party company that’s integrated into half the industry and just had a minor breach last month, don’t worry about it.” I read the fine print now, especially for anything involving kids, payouts, or “mature” content flags.

Third, I lean on local tools, not central surveillance. If a kid in my life wants to play an MMO, I’d rather lock down the console or PC with actual parental controls, time limits, and supervised accounts than trust some faceless vendor’s AI to decide who’s old enough. If you’re a parent, you’ve already got more power at the device and network level than most of these law-mandated systems will ever give you.

Fourth, I push back, even if it feels pointless. I leave feedback when platforms trial these systems. I support digital rights groups screaming about age verification overreach. I pay attention to my country’s laws and vote accordingly. None of that is as instantly satisfying as a boycott, but that’s how you slow the normalization of this crap.

And finally, I keep one rule front and center: if a platform ever says “just this one selfie” or “just this one ID” as the price of entry to a hobby that’s supposed to be fun, that’s a red flag, not a compromise.

Where I draw the line — and what I’m willing to lose

There’s a version of the future where online identity is sane. Where age assurance is handled locally, data is minimized, pseudonymity remains the norm, and governments accept that not everything has to be tied to a real-name dossier to be “safe enough.”

But that’s not the path we’re currently on. Right now, the pressure is toward more verification, more data, more “trust frameworks,” more reasons to treat simply logging into a game like boarding an international flight.

So here’s my line in the sand:

If an everyday MMO — not a bank, not a casino, not a professional esports league — asks me to upload a government ID or scan my face just to play, I’m done with it. I’ll walk away from that game, that platform, that ecosystem. I won’t bend “just this once” for a favorite franchise or a friend group that migrated there. I won’t normalize something I fundamentally believe is hostile to what made gaming special in the first place.

I can live without the next big raid tier. I can’t live with treating my most human, unchangeable identifiers like another checkbox in a sign-up form.

The industry is going to keep testing our boundaries. Some people will accept the trade, some won’t. But I know where my daily grind ends: at the point where the cost of logging in isn’t time or money, but a piece of myself I can never get back.