UK age verification is a two-layer system. Here is how each layer works.

Age verification for vape sales in the UK is often described as a single rule but in practice it is a combination of one clear age limit plus several layers of enforcement that sit on top of it. Understanding both layers matters whether you are an adult buyer wondering why you are being asked for ID or a retailer checking your own compliance.

The clear age limit sits in the Nicotine Inhaling Products (Age of Sale and Proxy Purchasing) Regulations 2015. That piece of legislation made it a criminal offence to sell a nicotine vape product to anyone under 18. It also introduced the separate offence of proxy purchasing where an adult buys a vape on behalf of someone under 18. Both offences apply across England, Wales, Scotland and Northern Ireland.

The enforcement layers that sit on top of that law are where most of the day-to-day rules you see in shops and on websites come from. In physical stores the industry standard is Challenge 25. In online shops the standard is independent third-party age verification. Neither of these is written into law word for word yet both have become the accepted baseline that Trading Standards and licensing authorities look for when checking whether a retailer has taken reasonable steps to prevent underage sales.

Challenge 25 in the shop

Challenge 25 simply says that if a customer looks under 25 the staff member must request photo ID. If the ID is not produced or does not prove the buyer is 18 or older the sale is refused. The policy closes the gap that Challenge 21 left open because a 17 year old can pass for 21 far more easily than for 25.

Acceptable ID typically includes:

• UK photocard driving licence including provisional licences.
• Valid passport from any country.
• PASS-accredited card carrying the PASS hologram such as CitizenCard or Validate UK.
• HM Forces identity card with a photograph.

Staff are trained to refuse student cards, library cards plus anything that does not carry a visible date of birth and a photograph. Good retailers log every refusal in a refusals book. That log is the first evidence a retailer produces if challenged by Trading Standards.

Age verification online

Online vape sales are governed by the same 18+ rule but the verification methods are different. A self-declared age gate on its own is not sufficient. UK online retailers must run a second check against an independent data source before dispatch. In practice this means one or more of the following:

• Yoti or AgeChecked digital ID verification at checkout.
• Credit reference bureau checks such as Experian or Equifax matching name, address and date of birth.
• Manual photo ID review for high-risk or flagged orders.
• Courier age verification on delivery using Royal Mail Age Verified or a DPD adult signature service.

Dispergo Vaping operates online age verification on every order before dispatch. Orders that fail verification are held until a valid photo ID is supplied or refunded if no valid ID is received within 7 days.

For the full set of UK vape law questions plus broader guidance on what every adult vaper needs to know about regulation, compliance plus the upcoming vape tax, visit our complete vaping FAQs hub. It covers every major question readers ask about the law, the MHRA, Trading Standards plus what is changing next.