On September 3, 2026, UK media regulator Ofcom finalized a £700,000 (about $986,000) fine against adult website XGroovy for failing to put age checks in place under the Online Safety Act, plus a further £30,000 for missing the deadline on a legally binding information request. XBIZ reported the decision on September 4. Ofcom additionally plans to levy a daily penalty of £200 per day until XGroovy hands over the requested information, or until November 3, 2026, whichever comes first.

Why It Matters

The enforcement math is starting to look real. Ofcom's earlier OSA penalties — £1.35M against 8579 LLC, £830K against Kick Online Entertainment, £630K against Fapello, £520K against 4chan — have now been joined by a £700K fine and a ten-site provisional notice, which means the regulator has moved past making examples and into running a docket. For any adult platform with UK traffic, the cost of noncompliance is no longer theoretical, and the £200-per-day information-request penalty is a novel wrinkle: it prices out the strategy of simply ignoring the regulator's letters. But the geoblock outcome is the durable lesson, and it echoes what the industry has been saying since these laws started passing. Mashable's reporting in late August documented adult retailers in age-verification states seeing DVD sales climb 20%+, and Free Speech Coalition policy director Mike Stabile calling consumer compliance with online AV "almost nonexistent." A regulator can force a site to leave; it cannot force a user to stay on the sites that remain. The pattern that keeps repeating — compliant sites lose traffic, noncompliant offshore sites gain it, VPN use spikes, physical media makes a comeback — suggests the enforcement is reshaping the market's geography more than its underlying demand. For sextech companies with UK exposure beyond pure content — connected-device platforms with in-app content libraries, cam integrations, VR storefronts — the ZD Media notice is the one to watch. Ofcom is now naming multi-domain operators in single actions, and the definition of "service" under the OSA has never been comfortably limited to tube sites.

The timeline is a study in how slowly this machinery actually moves. Ofcom opened its investigation into XGroovy in September 2025. In June 2026 it issued a provisional decision finding "reasonable grounds" to believe the site breached its OSA duties between July and November 2025. The final decision landed roughly three months after that — a full year from investigation to enforceable penalty, against a site that had already been in breach for months before the clock started.

The more interesting part is what XGroovy did in response. Per Ofcom, after formal enforcement action began the site implemented age assurance measures, then geoblocked UK IP addresses entirely, so it is no longer directly available to British users. That is the second-order outcome nobody's compliance framework optimizes for: the regulator wins the case, the site exits the market, and UK traffic goes wherever UK traffic goes. Ofcom's Director of Enforcement George Lusty framed the message narrowly and firmly: "The message to adult websites is clear: put effective age checks in place to keep children from accessing porn. If companies fail to do this, or ignore legally binding requests from us, they should expect to face fines."

XGroovy is not being squeezed only from London. In February, French media regulator Arcom sent enforcement notices to the same operator over failure to implement age verification under France's SREN law — the emerging pattern of parallel European regulators pursuing the same offshore operators through separate national statutes.

Ofcom also issued a provisional notice of contravention on the same day to ZD Media, which the regulator lists as operating hello.porn, homo.xxx, max.porn, ok.porn, ok.xxx, perfectgirls.xxx, pin.porn, pornhat.com, pornhat.one and pornstars.tube. That investigation also dates to September 2025; ZD Media has 20 working days to respond before Ofcom finalizes.

Sources

Update — 2026-09-08

{Initial entry — story first created.}

Update — 2026-10-02

More of the docket: two new provisional breach notices and one fine paid. On September 29–30, 2026, Ofcom posted a batch of Online Safety Act enforcement updates. XBIZ and MLex both reported them. Web Prime Inc., which runs anysex.com, fapality.com, mylust.com, xcafe.com and yourlust.com, and the provider of Porntrex (porntrex.com and porntrex.tv) both received provisional notices of contravention. Ofcom says it has "reasonable grounds" to believe each failed to use highly effective age assurance and failed to answer statutory information requests. Ofcom also closed its investigation into First Time Videos (FTVGirls.com, FTVMilfs.com). The company paid the £80,000 fine imposed in June, has started blocking UK IP addresses, and told Ofcom it will implement age assurance. MLex adds that Ofcom has now published a non-confidential version of its final decision against XGroovy, the operator in our original story.

That makes it two enforcement cycles in a row that ended with the operator leaving the UK rather than complying in place. XGroovy geoblocked after its £700,000 fine. First Time Videos paid and geoblocked. Meanwhile, two U.S. bills would bar U.S. courts from enforcing foreign "censorship" judgments: the HOMEFRONT Act and the GRANITE Act, of which Sen. Mike Lee introduced a Senate version last week. XBIZ notes that neither bill expressly covers or excludes age-verification laws. If either passes, collecting fines from operators based in the U.S. could get much harder.

Read: Ofcom's process is steady but slow: an investigation, a provisional notice about a year later, then a fine or an exit. The trend to watch is operators paying and leaving, because it makes UK enforcement work like a geoblocking regime. Compliant sites such as Aylo say the result is a market that favors operators that don't comply (see our Aylo coverage), and Ofcom has not answered that argument.

New Sources