Card Acquiring for UK and EU Adult Content Platforms
Online Safety Act and DSA aligned

Ofcom does not run a licence register for Part 5 services - the duty applies automatically if you publish pornographic content accessible from the UK. What acquirers want is evidence that highly effective age assurance is live, which method you use (facial age estimation, photo-ID with liveness, open banking, digital ID or credit-card check) and your audit log. Self-declaration or a tickbox alone will not pass underwriting.

Yes, credit-card verification is on Ofcom's non-exhaustive list of methods capable of being highly effective, but it has to be a genuine credit (not debit) card check with the issuer and supported by the rest of your safeguards. Most acquirers prefer to see it combined with a second method such as facial age estimation, because credit-card-only checks are weak against shared-household card use.

A new adult merchant on an EU acquirer typically opens at a 10-15% rolling reserve held for 180 days, released on a 30-day trailing basis. UGC platforms, free-trial offers and high-rebill subscription models open higher, often 15-20% over 180-270 days. Clean TC40 fraud data and chargeback ratios under 0.65% are the lever for step-down reviews at 3 and 6 months.

Yes, but the underwriting file has to evidence the controls explicitly: two government-issued IDs per performer, signed consent and content-licence records, a documented takedown SLA (typically 7 days for disputed content, 24-48 hours for flagged CSAM risk), hash-matching against PhotoDNA or equivalent, and an NCMEC or IWF reporting flow. Without that pack, even adult-programme acquirers decline at file review.

Adult merchants sit in Visa VIRP Tier 1 with an annual registration fee per acquirer plus per-transaction integrity fees, and Mastercard charges an annual SMR registration. These are normally passed through to the merchant - either as a fixed annual line item or baked into the MDR. Expect 10-20 bps of transaction cost on top of standard interchange-plus pricing to cover the scheme programmes.

No - the OSA Part 5 duty is based on the service being accessible from the UK, not on where you process. Using an offshore acquirer for UK consumers without highly effective age assurance exposes you to Ofcom enforcement (including business-disruption measures against payment providers) and the offshore acquirer themselves can be terminated by Visa for taking traffic that breaches scheme local-law clauses. Compliance has to be done at the platform layer regardless of acquirer geography.