Email verification confirms that the visitor controls an email address by sending a one-time code and checking it. On its own it does not prove age — anyone can hold an address — so ComplyAge uses it for account linking, recovery and low-risk gates, and as a supporting signal alongside stronger methods. It is not offered as the sole method in enforced zones.
How it works
The visitor enters an address; ComplyAge sends a short code that expires quickly; the visitor types it back. Sends are rate-limited per address and per session to stop abuse, and the code is bound to the session that requested it.
What it is good for
Linking a partner account to a ComplyAge identity, confirming a contact address before a postcard is mailed, recovering an account, and gating content in regions with no statutory requirement where you still want a deliberate step.
What it is not
Evidence of age. Email-based age estimation in the sense Ofcom describes — inferring age from an address's history with financial services — is a different technique that ComplyAge does not perform. An email code confirms possession only.
Frequently asked questions
- Does an email code count as age verification?
- No. It confirms control of an address. In enforced zones the visitor must also complete an accepted method such as government ID, facial age estimation or a payment card.
- How long is the code valid?
- A few minutes, and for one attempt at the session that requested it. A new code invalidates the old one.
- Do you send marketing to verified addresses?
- No. Addresses are used for the code and, if you choose, account recovery — never for marketing and never sold.