Age Verification Laws for Vaping in the UK

Age verification laws for vaping in the UK

Age verification is the legal backbone of the 18 plus rule on vape sales, with the duty applying everywhere vapes are sold. Retailers must check age before selling any vape, using Challenge 25 in shops and age verification online, with serious penalties for getting it wrong. The age of sale is firmly eighteen.

It helps to know that these are legal duties, not just shop preferences. The law sets the age at eighteen, then expects retailers to prove a buyer is old enough before they sell. This page explains the rules, how Challenge 25 works, how online checks work and the penalties, so the picture is clear for shoppers and retailers alike.

Let us look at the law, Challenge 25, online checks and penalties.

For shoppers, this mostly means having ID ready if you look young. For retailers, it means building reliable checks into every sale, since the law treats a failed check as a serious matter rather than a minor slip.

The legal basis

The rules rest on clear legislation. The Nicotine Inhaling Products Age of Sale and Proxy Purchasing Regulations of 2015 set the age of sale at eighteen, the Tobacco and Related Products Regulations of 2016 sit alongside, while proxy purchasing for a minor is a criminal offence, so verifying age is a legal duty.

• Age eighteen: the legal age of sale for any vape is eighteen.
• Covers all vapes: nicotine and nicotine-free products alike.
• Proxy buying illegal: buying for a minor is a criminal offence.
• A legal duty: verification is required, not optional.

This is why checks are taken so seriously. Because the law places the duty on the retailer, age verification is required rather than a courtesy, so a shop or website that fails to check is breaking the law, not simply being lax.

That legal footing is why even well-run shops ask for ID so readily, since staff are protecting the business as much as following policy. A quick check is far easier than the consequences of getting a sale wrong.

Challenge 25 and online checks

The method differs between shops and websites. In shops, retailers use Challenge 25 and ask for ID from anyone who looks under twenty-five, while online sellers must run age verification on every order, often with a delivery check too.

In a shop, Challenge 25 gives staff a safe margin, so you can be asked for ID even when you are clearly over eighteen, with accepted ID usually meaning a passport or photocard driving licence. Increasingly, PASS-approved digital ID is accepted as well. Online, the retailer typically checks your details at checkout against official records, then the courier can ask for ID on delivery, so the check happens more than once. Responsible sellers also keep refusal logs and clear signage. The aim throughout is to keep vapes away from under-eighteens while letting adults buy what they need. If you look young, carrying ID makes the whole process quicker and smoother.

The same is true online, where a clear date of birth and a valid ID to hand mean delivery goes smoothly. A failed check at the door simply means the parcel goes back, so it pays to be ready.

Penalties and what is changing

Getting verification wrong carries real consequences. A retailer who sells to an under-eighteen can be fined up to two thousand five hundred pounds, face Trading Standards action and lose the ability to sell, while the Tobacco and Vapes Act is set to tighten checks further, so compliance is essential.

For retailers, the penalties include fines of up to two thousand five hundred pounds per offence, enforcement from Trading Standards, stock confiscation and, for repeat breaches, loss of the licence to sell. Officers carry out test purchases both in shops and online to check that systems work. Looking ahead, the Tobacco and Vapes Act introduces a smokefree generation approach, raising the age of sale year by year so that anyone born on or after the first of January 2009 can never legally be sold tobacco or vapes, with physical shops still using Challenge 25 and digital ID becoming more common. The clear message is that verification is a legal requirement, so the simplest way to comply is robust checks every time. Always follow the latest official guidance.

• Fines: up to two thousand five hundred pounds per offence.
• Enforcement: Trading Standards run test purchases.
• Smokefree generation: the age of sale rises year by year.
• Digital ID: PASS-approved apps are increasingly accepted.

If you want to dig deeper, see our explainer on how old you have to be to vape. It pairs well with our guide on what happens if you are caught vaping under eighteen and our look at what vapes are illegal in the UK.

For the full set of guides, the UK vaping law hub brings everything together in one place.

Frequently asked questions