Refacto

Industry story

Roblox Begins Serving Ads to Children Under 13 via Facial Recognition

brand-safety identity privacy programmatic

Roblox, the gaming platform heavily used by children, has launched advertising to users under the age of 13 — a legally sensitive demographic under U.S. children's privacy law (COPPA). Kids who go through a new age-verification system using facial recognition will see untargeted ads if confirmed to be under 13. The move opens a significant but regulated audience segment to advertisers, with guardrails around targeting to limit data-based ad personalization for minors.

Full analysis

Decision Council: Roblox Opens Under-13 Ads via Facial Age-Gating

Step 1 — Frame

Roblox is now serving ads to verified under-13 users, gating them behind facial-recognition age checks and serving "untargeted" (no behavioral personalization) inventory to confirmed kids. The question for ad-tech operators: is this a new premium inventory category worth building toward, or a regulatory tripwire worth avoiding?

  • Reversibility: Type 2 for buyers (you can pause spend Tuesday). Type 1 for the category — once facial age-gating of children becomes a norm, it's hard to un-ring, and the precedent reshapes how every youth platform monetizes.
  • What's actually being decided: Not "should Roblox do this" — that's done. It's whether the buy side, identity vendors, and brand-safety players invest engineering and legal effort to support a verified-minor signal, or sit out until the legal picture clears.
  • Forcing function: FTC posture under current leadership, state AG appetite (CA, TX, IL/BIPA), and whether a marquee advertiser publicly commits or publicly refuses.

Proceeding — the story is clear enough.

Step 2 — The Council

The Market Analyst. The clean story — "verified context beats targeting, so untargeted kid inventory earns a premium" — is seductive and probably wrong on volume. Plainly: even if each ad to a verified kid is worth more, there won't be many of them. Facial-verification friction will shrink the addressable pool to a fraction of Roblox's user base, because most kids will bail or hand the phone back to a parent. For public ad-tech names, this is not a revenue event in 2026 — it's a positioning event. The companies that benefit aren't the DSPs; they're the age-assurance and identity vendors (think the verification layer) who get a new compliance product to sell across every youth platform, not just one.

The Skeptic. The load-bearing assumption is that "untargeted + facial verification" reads as a safe harbor. It doesn't. Plainly: telling a regulator "we scanned kids' faces and then showed them generic ads" solves the targeting problem by creating a biometric-data problem. Collecting facial data from children to prove they're children is exactly the kind of processing that lights up COPPA, Illinois BIPA, and GDPR Article 9. The defense and the liability come from the same act. Add that "untargeted" is doing heavy lifting — contextual signals on a gaming platform are still signals, and a clever plaintiff's lawyer will argue so. This is a compliance-heavy placement selling remnant-grade ads. That's not a category; that's a press release.

The Operator. Forget the strategy deck — here's Tuesday. No major DSP pipe cleanly carries a "verified minor" flag today, and your safest move is to exclude this inventory until one does. Holdco legal will issue a blanket hold the moment they see "facial recognition" and "under 13" in the same sentence. Plainly: the people who buy ads will freeze first and ask questions later. At 90 days you've got brand-safety vendors scrambling to certify placements, ad-ops forking frequency-cap and exclusion rules for a cohort whose signal they can't trust, and account teams explaining to clients why they're nowhere near this. The execution cost is real; the inventory it unlocks is tiny.

The Customer / End User (the brand advertiser). Almost no blue-chip brand wants the headline "Advertised to children via face scanning." Toy, cereal, and game brands are the natural buyers — and they're also the most exposed to a parent backlash and a Congressional hearing clip. Plainly: the brands who'd want this audience are the ones who can least afford the bad press of reaching it. A few performance-driven kids'-app advertisers may dabble at remnant prices. But the brands that would make this a real market will wait for a peer to go first and survive. Nobody volunteers to be the test case.

Step 3 — The Tensions

  1. Premium or remnant? The Strategist/Market view says verified inventory commands a higher price; the Skeptic says verification friction makes the pool so small, and the legal overhang so heavy, that it clears at remnant rates. Both can't be right — and volume decides it.
  2. Is facial verification a moat or a liability? The bull case treats face-based age-gating as a compliance moat others must copy. The Skeptic treats the same act as the single biggest source of legal exposure. The verification step is simultaneously the product's defense and its detonator.
  3. Who actually profits? Buyers freeze; brands hesitate. If anyone wins early, it's the age-assurance vendors selling shovels — not the platforms or DSPs hoping to dig gold.

Step 4 — Synthesis

This hinges on three beliefs, in order of importance:

  1. Verification adoption — what fraction of under-13 users actually complete a face scan? If it's small (likely), the inventory is a rounding error and the category debate is moot for ad-tech P&Ls this year.
  2. Regulatory read on biometrics — does collecting children's facial data to protect children count as a defense or an aggravating factor? Until an enforcement action or guidance lands, no holdco lawyer will sign off at scale.
  3. First-mover brand willingness — does a recognizable advertiser publicly commit budget and survive the press cycle?

The council leans clearly cautious: this is a positioning story, not a revenue story, and the near-term winners are verification vendors, not buyers. What to verify before spending engineering effort: (a) ask your DSP whether it can pass and honor a verified-minor exclusion flag today — if not, you can't safely touch this anyway; (b) get GC sign-off specifically on the biometric-collection question, not just the targeting question; (c) watch whether one named brand goes on record. De-risk by building the exclusion capability first — that protects you regardless of which way the category breaks.

Step 5 — The Prediction

Prediction: By 2026-12-13, no top-20 advertiser will publicly disclose a committed budget for Roblox's verified under-13 ad inventory, and at least one U.S. state attorney general or the FTC will have publicly questioned or opened scrutiny of the facial-verification approach.

Revisit by 2026-12-13: We're right if the inventory stays in quiet pilot mode — no marquee brand names a spend commitment — and a regulator (FTC or a state AG in CA, TX, or IL) makes a public statement, inquiry, or filing about children's biometric age-verification. We're wrong if a recognized national advertiser publicly commits disclosed budget to this inventory and the approach draws no public regulatory challenge in the U.S.

The friction in face-scanning collapses the audience to a size that doesn't justify the legal heat, and "we scanned kids' faces" is too easy a target for a regulator looking for a headline. The smart money builds the exclusion signal, sells verification tooling, and waits for someone braver to find out whether this is a market or a lawsuit.