Ofcom has announced that it is investigating an online suicide forum, which remains unnamed due to its sensitive nature, to determine if the service provider has failed to comply with the UK's Online Safety Act 2023 (OSA). This is the first investigation of its kind under the new laws. The investigation seeks to determine if the forum's provider has failed to implement necessary safety measures to protect UK users from illegal content, complete a proper illegal harms risk assessment, and respond adequately to statutory information requests. If found non-compliant, Ofcom can issue a provisional notice of contravention, allowing the provider to respond before a final decision is made.

Ofcom has launched an investigation into Meta Platforms Inc (Meta) to examine whether it failed to meet its obligations when responding to information requests issued under section 135 of the Communications Act 2003 (CA 2003). Meta was issued the formal notices on 31 July 2024 and 19 June 2025 as part of Ofcom’s monitoring of the retail business messaging market and the subsequent Wholesale A2P SMS Termination Market Review, specifically concerning Meta’s WhatsApp Business services. Evidence available to Ofcom suggests that Meta may not have fully complied with the notices, as some of the information provided may have been incomplete and inaccurate. Where Ofcom has reasonable grounds to believe that a contravention has occurred, it may take enforcement action under CA 2003, s 183.

Ofcom has launched enforcement investigations into Telegram, Teen Chat and Chat Avenue to assess their compliance with the Online Safety Act 2023. Regarding Telegram, Ofcom is examining whether the platform has complied with its duties to assess and mitigate the risk of child sexual abuse material (CSAM) being shared, following evidence from the Canadian Centre for Child Protection as well as Ofcom’s own assessment. Ofcom is also investigating Teen Chat and Chat Avenue, to determine if they are taking adequate measures to assess and mitigate the risks that UK users encounter illegal content and activity, including grooming. Separately, Ofcom has reported progress in relation to file‑sharing services. Notably Pixeldrain has implemented hash‑matching technology to detect and remove CSAM, while Yolobit and several other file‑sharing providers have restricted access to their services for UK users following Ofcom’s enforcement action.

Ofcom has launched a formal investigation into X under the Online Safety Act 2023 (OSA 2023) to assess whether it has complied with its duties to protect UK users from illegal content, following reports that the Grok AI chatbot account on X has been used to create and share undressed images of individuals, including non‑consensual intimate images and child sexual abuse material. Ofcom contacted X on 5 January 2026 and, after receiving X’s response by the 9 January 2026 deadline, carried out an expedited assessment before deciding to investigate due to concerns over risks to children and potential breaches of obligations.

Ofcom has launched a formal investigation under the Online Safety Act 2023 into the provider of two unnamed online image boards to determine whether it has failed to comply with its duties to protect people in the UK from illegal content, including non-consensual intimate images and child sexual abuse material. Following engagement with victims, survivors and advocacy groups and an initial assessment of the sites, Ofcom will examine whether the provider conducted an adequate illegal content risk assessment, implemented proportionate measures to prevent users encountering priority illegal content, minimised the time such content remains online, removed illegal material promptly when aware of it, set out appropriate protections in its terms of service, and operated effective reporting and complaints procedures. Ofcom stated that its role is to assess compliance with statutory obligations rather than direct the removal of specific content, and confirmed that, if a breach is found, it may require remedial action, impose fines of up to £18m or 10% of qualifying worldwide revenue, or seek court-ordered business disruption measures, while reiterating that services accessible to UK users must comply with UK law.

Ofcom has launched investigations into five companies operating 22 pornography websites for potential non-compliance with age verification requirements under the Online Safety Act 2023 (OSA 2023). The companies—Cyberitic, LLC, Web Prime Inc, Youngtek Solutions Ltd, ZD Media s.r.o and the provider of xgroovy—were selected based on risk assessment and user numbers, collectively reaching over eight million UK visitors each month. Ofcom is gathering and analysing evidence to determine any contraventions and will issue provisional notices where compliance failures are identified. Ofcom is also expanding the scope of its ongoing investigations into 8579 LLC and Itai Tech to examine potential failures in adequately responding to statutory information requests.

Ofcom has initiated formal investigations into four companies operating 34 pornography websites for potential non-compliance with age verification requirements under the Online Safety Act. The companies—8579 LLC, AVS Group Ltd, Kick Online Entertainment S.A. and Trendio Ltd—were selected based on risk assessment and user numbers, collectively reaching 9 million monthly UK visitors. The investigations follow the 25 July 2025 implementation of mandatory age verification requirements. Ofcom can impose fines of up to £18m or 10% of qualifying worldwide revenue and seek court orders for business disruption measures including payment service restrictions and UK access blocking.

Ofcom has opened nine new investigations under the Online Safety Act 2023 into whether the online discussion forum 4chan, seven file-sharing platforms, and the pornography provider First Time Videos have breached statutory duties to protect UK users. The regulator is assessing whether 4chan and file-sharing services Im.ge, Krakenfiles, Nippybox, Nippydrive, Nippyshare, Nippyspace and Yolobit failed to implement appropriate safety measures, conduct and retain suitable illegal harms risk assessments, and respond to legally binding information requests. Complaints were received regarding the potential circulation of child sexual abuse material on the file-sharing sites and broader concerns around illegal content on 4chan. Ofcom is separately examining whether First Time Videos LLC, which operates FTVGirls.com and FTVMilfs.com, has failed to deploy highly effective age verification mechanisms. The investigations form part of Ofcom’s wider enforcement activity following the implementation of online safety duties, with further action anticipated as additional requirements take effect.

Ofcom has launched its third consultation to support implementation of the online safety fees regime under the Online Safety Act 2023 (OSA 2023). The consultation sets out proposed technical guidance to help providers of regulated services comply with notification requirements. These fees, which will fund Ofcom’s online safety regulation, are payable by companies in scope of the OSA 2023 whose qualifying worldwide revenues (QWR) meet or exceed a threshold set by the Secretary of State. Providers are required to notify Ofcom in certain circumstances, unless exempt, and submit evidence detailing their regulated services and QWR. The Online Safety Act 2023 (Fees Notification) Regulations 2025, SI 2025/747, were laid before Parliament on 26 June 2025 and are expected to come into force on 14 September 2025. Responses are sought by 1 October 2025.

Ofcom has made regulations amending the Wireless Telegraphy (Direct to Device Satellite Communications) (Exemption) Regulations 2026, SI 2026/139 to extend the existing licence exemption for Direct to Device (D2D) satellite services to mobile handsets and other SIM-enabled devices operating on specified frequencies in the 900 MHz band. The amendments follow Ofcom’s April 2026 approval of a licence variation enabling VodafoneThree to provide D2D services using its licensed 900 MHz spectrum and implement the regulator’s previously established policy framework for D2D services. Following consultation, Ofcom decided to proceed with the amendments, subject only to minor typographical changes. The regulations will come into force on 10 July 2026.

Ofcom has decided to modify General Conditions C2.11 and C2.12 to remove references to the Phone-paid Services Authority (PSA) and the PSA's Code of Practice, and replace them with Ofcom and the Regulation of Premium Rate Services Order 2024 from 1 February 2025. Under the modifications, providers will be required to give information to consumers on request about how they can obtain information about PRS numbers found on their bills, the provider's role in dealing with complaints and how Ofcom deals with complaints as the regulator of premium rate services.

Ofcom has opened a formal investigation into Aylo, the provider of Pornhub, to determine whether it has complied with its duties under the Online Safety Act 2023 (OSA 2023) to prevent children from accessing pornographic content. The investigation follows Aylo’s introduction in May 2026 of a new age-assurance process for some UK users, which relies on signals from Apple indicating that a user may have completed Apple’s age checks. Ofcom states that Aylo remains responsible for ensuring that the process is highly effective, regardless of where the age check takes place. It is concerned that Aylo may not have completed sufficient due diligence and testing before deployment, and may not have carried out a suitable and sufficient assessment of whether its service is likely to be accessed by children. Ofcom will examine the implementation of the process and Aylo’s compliance with these requirements, but will not assess Apple’s own age-checking arrangements. If it finds a breach, Ofcom may require Aylo to take remedial action and impose a fine of up to £18 million or 10% of qualifying worldwide revenue, whichever is greater.