Texas Attorney General Ken Paxton filed a lawsuit against Discord on May 22, accusing the platform of enabling child predators and deceiving parents about its safety. The remedy Texas is requesting goes beyond fines or safety fixes. Paxton wants a court to order mandatory age verification for every Discord user under the state's Securing Children Online through Parental Empowerment Act.
The SCOPE Act, which took effect in September 2024, requires covered platforms to verify user ages and obtain parental consent before minors can create accounts. For platforms that host harmful or obscene content, the law mandates what it calls "commercially reasonable age verification." In practice, that means government ID uploads, biometric face scans, or third-party verification services that cross-reference personal records.
A Pattern Emerging Across States
Texas is not acting alone. Nevada, Indiana, and New Jersey have already sued Discord over similar concerns. Florida opened its own investigation in March. Paxton's office has also filed suit against Snapchat, TikTok, Roblox, and, just this week, WhatsApp. The throughline: platforms that allow minors to interact with strangers are being pushed toward identity verification at the door.
The lawsuit cites specific tragedies. A 13-year-old Texas girl was sexually assaulted after being groomed on Discord for years. A 15-year-old boy was coerced into producing explicit material and later died by suicide. Another 13-year-old was targeted by the "764" extremist network, which operated openly on Discord servers, and also took his own life. Federal prosecutors have separately described Discord's architecture as "a hunting ground to find, manipulate and sextort our most vulnerable."
Discord disputes the characterization. A spokesperson told reporters that roughly 80 percent of its users are adults and that the service requires users to be at least 13. "The lawsuit's characterization of Discord does not reflect the platform we have built or the investments we have made in user safety," the company said.
The Privacy Problem No One Is Solving
What makes the Texas lawsuit significant is not the allegations. It is the remedy. Age verification at scale creates a new category of risk that regulators have largely declined to address.
Discord provides a useful case study. In September 2025, hackers breached 5CA, a third-party vendor Discord used to handle age verification appeals. The attackers, a group calling itself Scattered Lapsus$ Hunters, maintained access for 58 hours. Discord confirmed that approximately 70,000 government ID images were exposed. The breach happened precisely because the platform was collecting identity documents in the first place.
Biometric data presents even greater concerns. Unlike passwords, facial geometry cannot be reset. If compromised, the consequences are permanent. Age verification systems also tend toward function creep: data collected to confirm someone's birthday can be repurposed for tracking, profiling, or law enforcement requests. And the systems disproportionately exclude marginalized populations. The EFF has noted that 15 million U.S. adults lack driver's licenses and 2.6 million have no government photo ID at all.
Global Momentum, Mixed Results
Australia became the first country to enforce a nationwide under-16 social media ban in December 2025. Platforms including Instagram, TikTok, YouTube, and Snapchat now face fines of up to $49.5 million if they fail to prevent minors from holding accounts. The EU is rolling out its Digital Identity Wallet by the end of 2026. Denmark, Norway, France, Spain, Malaysia, and New Zealand are all advancing similar proposals.
Yet the constitutional picture in the United States remains unsettled. A federal judge has blocked several provisions of the SCOPE Act, including its age verification requirement, calling them "unconstitutionally vague." The Fifth Circuit has issued conflicting rulings, and the Supreme Court has agreed to hear a related case involving Texas's law requiring age verification for adult content websites.
The Texas lawsuit against Discord is part of a broader reckoning with platform accountability. But the policy question it raises has no clean answer. Protecting children online is a legitimate goal. So is preserving the ability to use the internet without handing over biometric data to vendors who may or may not be able to protect it. The current regulatory approach treats these as sequential priorities. Discord's 70,000 leaked IDs suggest they may be fundamentally in tension.
