Fines for selling age-restricted products online: UK, US and Germany compared (2026)
Lukas Deward
Managing Director, OneGuard GmbH
Selling an age-restricted product to a minor online can cost up to 2 years' imprisonment in the UK once the Crime and Policing Act 2026 knife provisions commence, up to $10,000 per violation under the US PACT Act, and up to €50,000 per offence in Germany, before warning letters, delistings and lost carrier contracts. The table lists the maximum penalties by country and product, each with its primary source.
The penalties at a glance
| Country | Product | Law | Maximum penalty | Who enforces |
|---|---|---|---|---|
| UK | Knives and bladed articles | s. 141A Criminal Justice Act 1988, amended by s. 29 Crime and Policing Act 2026 | Today: up to 6 months' imprisonment and/or a fine (unlimited in England and Wales). Once s. 29 commences: up to 2 years' imprisonment and/or a fine, triable either way | Trading Standards, police |
| UK | Vapes and nicotine products | s. 10 Tobacco and Vapes Act 2026 (from 29 Oct 2026) | £200 fixed penalty notice (s. 37 England, s. 40 Wales); fine up to level 4 (£2,500) on conviction; restricted premises order of up to one year for persistent offenders (s. 23) | Trading Standards (s. 32) |
| UK | Tobacco (generational ban) | s. 1 Tobacco and Vapes Act 2026 (from 1 Jan 2027: no sale to anyone born on or after 1 Jan 2009) | £200 fixed penalty notice; fine up to level 4 (£2,500) on conviction | Trading Standards |
| UK | Alcohol | s. 146 Licensing Act 2003 (sale, including remote sales); s. 151 (delivery to under-18s) | Fine up to level 5, unlimited in England and Wales for offences since 12 March 2015 (s. 85 LASPO 2012) | Trading Standards (s. 154), police, licensing authorities |
| US | Vapes, cigarettes, smokeless tobacco | PACT Act, 15 U.S.C. §§ 375–378 | Civil penalty up to $5,000 (first) or $10,000 (each later violation), or 2 % of prior-year gross sales if greater (§ 377(b)); criminal: up to 3 years (§ 377(a)); USPS mail ban (18 U.S.C. § 1716E) | ATF, US Attorney General, state attorneys general (§ 378) |
| US | Alcohol | State law; alcohol is nonmailable via USPS (18 U.S.C. § 1716(f)) | Varies by state; no federal figure | State alcohol control agencies, state attorneys general |
| US | Knives | State and local law; switchblades: Federal Switchblade Act, 15 U.S.C. § 1242 | Varies by state; switchblades in interstate commerce: up to $2,000 and/or 5 years | State and local prosecutors (federal for switchblades) |
| Germany | Tobacco, vapes, alcohol, FSK-18 media | § 28 Abs. 5 JuSchG | Fine up to €50,000 | Authorities designated by each German state |
| Germany | Online content (e.g. pornography outside closed user groups) | § 24 Abs. 3 JMStV | Fine up to €500,000 | State media authorities and the KJM |
| Germany | Any of the above, as unfair competition | § 3a, § 13 UWG | No state fine, but warning letter costs (example: €1,375.88 at a €25,000 claim value) and contractual penalties, typically from €5,001 per breach | Competitors, trade associations |
| Germany | Nitrous oxide | § 3, § 4 NpSG (mail-order ban, no sale to minors, since 12 April 2026) | Up to 3 years' imprisonment or a fine; commercial dealing up to 10 years | Police, public prosecutors |
These are maximums. How close you get to them depends largely on whether you can show a documented verification process.
United Kingdom: test purchases decide
Trading Standards enforce these rules locally. The Licensing Act gives them the duty to enforce s. 146 and the power to make or authorise test purchases (s. 154); the Tobacco and Vapes Act 2026 assigns vapes and tobacco to the same authorities (s. 32). In practice an under-age volunteer orders from your store; the parcel at the door is the evidence.
Your defence is always the same: you took all reasonable steps or exercised all due diligence to establish age (s. 146(4), s. 10(2) TVA 2026, s. 141A(4) CJA 1988). A checkbox is not a reasonable step. For knives, the Crime and Policing Act 2026 spells out what is: a photographic ID document plus a current photo of the buyer at the point of sale, and a courier ID check at delivery (gov.uk factsheet); commencement is being phased in by regulations. See our guides on UK vape shops and selling knives online.
United States: federal for vapes, state for everything else
The PACT Act treats every online vape, cigarette and smokeless tobacco seller as a "delivery seller": register with the ATF and state tax administrators, file monthly reports, verify each buyer's name, date of birth and address against a database built primarily from government sources, and ship with adult signature at the local minimum age, 21 under federal law (15 U.S.C. § 376a). The Attorney General and state attorneys general can both sue for civil penalties and injunctions (§ 378). USPS has treated vapes as nonmailable since its October 2021 rule (Federal Register), and the major private carriers announced the end of home delivery for vaping products in 2021 (NACS).
Alcohol and knives have no federal underage-sale penalty; each state sets its own rules and figures, and some cities add more. We do not list state amounts because they differ widely and change.
Germany: competitors enforce faster than the state
The €50,000 fine under § 28 JuSchG exists, but the cost most German shops actually meet is a warning letter (Abmahnung) from a competitor. Youth-protection rules are market conduct rules under § 3a UWG, so a rival can demand a cease-and-desist undertaking and its lawyer's fees (§ 13 UWG). A documented e-cigarette example: €1,375.88 at a €25,000 claim value (IT-Recht Kanzlei). Undertakings usually carry a contractual penalty, often from €5,001 per breach; treat these as typical ranges, not fixed amounts.
The Federal Court of Justice confirmed the model in March 2026: a competitor test-ordered an empty replacement tank via a marketplace, received it without an age check, and won injunctive relief, information and the warning letter costs (BGH, I ZR 106/25). For online content the JMStV adds fines of up to €500,000; for nitrous oxide, mail order has been banned outright since 12 April 2026 under the NpSG.
The hidden costs
The fine is rarely the largest line item.
- Marketplace delistings. A test purchase or complaint that exposes an age-check gap can suspend a listing or an account.
- Carrier agreements. Age-verified delivery is a contracted service; carriers that find restricted goods in standard parcels can withdraw terms.
- Restricted premises orders. In the UK, a persistent vape or tobacco offender can be banned from selling those products for up to a year.
- Cancelled orders and chargebacks. Every order you cannot prove was verified is one you may have to refund.
How to avoid them
- Verify at the order stage. Use an ID check with document scan, face match and liveness, or selfie age estimation with an ID fallback, only for restricted products. The OneGuard platform does a full check in under 20 seconds.
- Verify at the delivery stage where required. UK knives, US vapes and German alcohol all need an adult-only handover on top of the order check.
- Hold the order until the result is in. The Shopify app and the WooCommerce plugin keep affected orders on hold and release them automatically.
- Keep records, not images. Store the verification ID, result and timestamp per order; raw images stay with the provider and are deleted after 30 days at the latest. Unclear cases get a manual review, which documents the decision.
Product-specific guidance is on our vape and tobacco and alcohol and spirits pages.
FAQ
What is the penalty for selling vapes to minors online in the UK?
From 29 October 2026, a £200 fixed penalty notice under s. 37 (England) or s. 40 (Wales) of the Tobacco and Vapes Act 2026, or on conviction a fine up to level 4 (£2,500) under s. 10. Persistent offenders risk a restricted premises order of up to one year.
What is the penalty for selling knives to under-18s in the UK?
Currently up to 6 months' imprisonment and/or a fine, unlimited in England and Wales, under s. 141A Criminal Justice Act 1988. Section 29 of the Crime and Policing Act 2026 raises this to 2 years' imprisonment and/or a fine, triable either way, once commenced by regulations.
How much is a PACT Act fine?
Up to $5,000 for a first violation and $10,000 for each later one, or 2 % of the previous year's gross sales, whichever is greater (15 U.S.C. § 377(b)). Criminal violations carry up to 3 years' imprisonment.
Can a competitor fine me in Germany?
Not a fine in the legal sense, but a competitor can send a warning letter, demand a cease-and-desist undertaking and recover its costs under § 13 UWG. Breach the undertaking and the agreed contractual penalty becomes due.
Does an age checkbox protect me from a fine?
No. Every defence in the laws above requires reasonable steps or due diligence to establish age. A checkbox or a self-typed date of birth establishes nothing.
This article is not legal advice.
See what a compliant check looks like. Try the demo: a full ID check with liveness in under 20 seconds, ready for Shopify, WooCommerce or your own checkout via API.
Shopify age verification: popup vs. ID check — which one keeps you compliant in 2026?
Shopify has no built-in age verification. Compare popups, date-of-birth fields, database checks and ID checks, and see what UK, US and German law expect.
EU age verification in 2026: what the Commission's recommendation and the EU age verification app mean for online shops
No new EU-wide age check duty for shops: what the 29 April 2026 recommendation, the EU age verification app, the EUDI Wallet and DSA Article 28 require.