The phrase "age verification" has come up repeatedly across our coverage, but what it actually requires — and how far it goes — varies a lot by market: from a simple "21+ printed on the box" to South Korea's networked ID checks on vending machines. This piece pulls together the age-verification requirements referenced across our coverage into one reference framework.
Tier one: legal purchase age + packaging labels
This is the baseline requirement, present in nearly every legal market — the minimum legal purchase age varies (21 in the US, 18 in most other markets, 21 in Prince Edward Island specifically, 18 in South Africa), with a clear age-restriction mark printed on packaging. This tier places relatively limited real-world constraint on retail — enforcement largely depends on retailer diligence.
Tier two: online sales restrictions or bans
A step beyond the baseline is restricting or banning online sales outright, on the logic that age verification is harder to enforce online than at a physical counter:
- South Korea: from April 2026, synthetic nicotine e-liquid is banned from online sale entirely
- South Africa: under current rules, vapes are regulated as medicinal products, and personal online purchases aren't permitted
- New Zealand: doesn't ban online sales outright, but tightly restricts online display (no product images allowed)
Tier three: display and merchandising restrictions
This tier isn't about whether a product can be sold — it's about whether it can be seen, on the logic of reducing incidental exposure for non-target audiences, particularly minors:
- New Zealand: in-store displays can't be visible from outside; no discounts or loyalty programs permitted
- South Africa (proposed): point-of-sale display bans, following the same logic as the UK and New Zealand
- The UK, and some Canadian provinces: flavored products restricted to specialty shops, off-limits at ordinary convenience stores
Tier four: networked device-level verification (the strictest tier so far)
Among the markets covered so far, only South Korea has explicitly introduced this tier — from February 2026, vending machines must have age-verification capability and can't be located near schools. This means a vending machine can no longer be a simple "insert coin, get product" mechanism — it needs identity-verification capability, a technical bar an order of magnitude higher than packaging warnings or manual checks.
At a glance
| Verification tier | Requirement | Example markets |
|---|---|---|
| Baseline | Legal age + packaging label | Nearly all legal markets |
| Moderate | Online sales restricted/banned | South Korea, South Africa (current), New Zealand (partial) |
| Stricter | Display/merchandising restricted | New Zealand, UK, some Canadian provinces |
| Strictest | Networked device-level verification | South Korea (vending machines, from Feb 2026) |
Practical guidance for distributors
- Don't assume a printed age restriction on packaging satisfies a target market's age-verification requirements — that's just the baseline tier, and more markets are layering on display restrictions, online limits, or even device-level identity checks
- Product lines planning to go through online channels should confirm whether the target market restricts online sale at all — this detail is easier to overlook than the broader "can it be sold" question
- This pattern of escalating verification requirements is the same kind of signal covered in our battery-compliance and flavor-naming pieces — regulatory granularity is rising across the board, and compliance on a single dimension (like nicotine strength alone) is no longer enough to cover the real risk
(General information only, not legal advice — consult a lawyer familiar with compliance in your target market before making business decisions.)