Online alcohol age verification laws and penalties: UK
· 7 min read
- Applies to
- Retailers selling alcohol for delivery to customers in England and Wales
- In force
- Licensing Act 2003; mandatory age verification condition since 2010
- What to do
- Verify at the point the order is picked, and treat the doorstep check as policy you must still run
Where does an online alcohol sale happen? Not where the customer clicks, and not at the front door. Section 190 of the Licensing Act 2003, headed "Location of sales", applies "where the place where a contract for the sale of alcohol is made is different from the place where the alcohol is appropriated to the contract", and provides that "the sale of alcohol is to be treated as taking place where the alcohol is appropriated to the contract."
Appropriation is the moment the specific bottles are set apart for that order. For a supermarket that is a picking station; for a wine merchant, a shelf in a warehouse. So the licensable act, the offence, and the mandatory conditions all attach to a building the customer has never seen. A call centre taking orders needs no licence. The warehouse does.
Everything awkward about UK alcohol e-commerce follows from that.
The offence, and the defence that defines the check
Section 146(1) is short: "A person commits an offence if he sells alcohol to an individual aged under 18."
Subsection (4) gives the defence — that the defendant believed the individual was 18 or over, and either "had taken all reasonable steps to establish the individual's age" or "nobody could reasonably have suspected from the individual's appearance that he was aged under 18." The second limb assumes a person you can look at, which an online seller does not have.
Subsection (5) then supplies a deeming rule that is the most useful sentence in the section for anyone designing a checkout. A person is treated as having taken all reasonable steps if "he asked the individual for evidence of his age, and the evidence would have convinced a reasonable person." Two elements: you asked, and what you got back would have persuaded a reasonable person. A self-declared date of birth fails the second regardless of how prominently you asked.
The penalty in subsection (7) is a fine not exceeding level 5 on the standard scale — which, by section 85(1) of the Legal Aid, Sentencing and Punishment of Offenders Act 2012, became "a fine of any amount" for offences punishable by £5,000 or more. Level 5 is unlimited.
The condition tobacco does not have
Alcohol has something the tobacco regime in England and Wales lacks entirely: a statutory duty to operate an age verification policy.
Paragraph 4 of the Schedule to the Licensing Act 2003 (Mandatory Licensing Conditions) Order 2010, specified under section 19A, provides that the premises licence holder "shall ensure that an age verification policy applies to the premises in relation to the sale or supply of alcohol", and that the policy "must require individuals who appear to the responsible person to be under 18 years of age (or such older age as may be specified in the policy) to produce on request, before being served alcohol, identification bearing their photograph, date of birth" and a security feature. The Home Office describes the accepted form as ID carrying a photo, date of birth and "either a holographic mark or ultraviolet feature".
Read that against section 190 and the mismatch appears. The offence is committed at the sale, which the Act locates in the warehouse. The condition speaks of being served. Those are not the same event for a delivered order, and the gap between them is where the doorstep check lives.
Who has to check at the door
Less than most retailers assume.
Section 151 makes it an offence to deliver alcohol to a person under 18 — but read the elements. It applies to "a person who works on relevant premises in any capacity", and it requires that the person "knowingly delivers" to an individual aged under 18. A third-party courier working for a parcel network is generally neither working on the licensed premises nor in a position to know. The section catches a store's own driver far more readily than a carrier.
The government has said as much in its own words. The Home Office consultation Alcohol licensing: age verification, which ran from 24 January to 30 March 2024, records that the Act "only sets out a requirement to verify age at the point of sale or appropriation to a contract, not at the point of delivery", and asked whether it should be amended so checks also take place at the point of delivery or service. The consultation results were published on 21 December 2024.
The same consultation asked a second question with more direct consequences for product teams: whether the Act should be amended "so as to allow digital identities and technology to play a role in age verification", including age estimation. The present drafting requires a responsible person to look at a physical document — which is why the sophisticated check an online retailer can run at checkout is not, on the face of the condition, what the condition asks for.
Until that changes, the defensible position is to satisfy both readings: a real verification at the point of appropriation, and a documented doorstep policy that the delivery operation actually follows.
Repeat failures escalate to the premises
Section 147A creates the offence of persistently selling alcohol to children: alcohol unlawfully sold "on 2 or more different occasions within a period of 3 consecutive months" on the same premises, where the defendant was a responsible person at each such time. Subsection (8) makes it punishable on summary conviction by a fine.
Note how section 190 interacts with "the same premises". For a physical estate, two failures in two shops are two premises. For an online retailer whose sales all occur where the stock is appropriated, failures across the whole customer base can point at a single site. The offence was drafted for a corner shop that keeps serving fifteen-year-olds; applied to a fulfilment centre, the same two occasions in three months can be assembled from anywhere in the country.
Section 146 is expressed to extend to England and Wales. Scotland and Northern Ireland run their own licensing statutes, and a UK-wide retailer is operating under three regimes, not one.
What this looks like in practice
- Put the real check at the point of appropriation. That is where the Act says the sale happens, and where the section 146 offence is committed.
- Ask for evidence, and make sure what you get back would convince a reasonable person. Section 146(5) sets both halves of that test.
- Keep a written age verification policy for the licensed site. It is a mandatory condition, not a good practice, and its breach is a licensing matter independent of any sale.
- Do not assume the courier is covered. Section 151 needs a worker on the relevant premises acting knowingly.
- Instruct doorstep checks anyway, and record them. The condition speaks of being served, and the government has consulted on closing the gap explicitly.
- Watch for the digital identity amendment. The current condition is written around a physical document, and the technology you already run is ahead of it.
The UK regulates online tobacco by making the check the only defence to an offence. It regulates online alcohol by also requiring a policy — then locating the sale somewhere the policy was never written for.
Checkout-Ready Age Verification for Regulated Ecommerce
Age verification that runs inside checkout for tobacco, vape, alcohol, CBD, and other age-restricted catalogs. White-label, sub-60-second, $0.30 per verified order through official Shopify and WordPress (WooCommerce) integrations.