Age verification for restricted products
How do we verify a customer's age before shipping a restricted product, with the method matched to the state's law and the result recorded on the order?
Verify before the order is released, by the method the state requires, and record it. When an order contains an age-restricted product (alcohol, tobacco and vapor products, certain knives or tools, lottery or gaming items, adult products, firearm accessories where sold), Callvu classifies the restriction by the product and the delivery state (the minimum age, the verification method the state accepts, the delivery signature requirement, the shipping prohibitions by state and carrier), holds the order, asks the customer to verify on a secure screen by the accepted method (a third-party identity verification against public records, a document and selfie check, or a database match with the date of birth and the identifiers), reads the result, routes a failed or inconclusive verification or a prohibited route to the compliance desk in the Decision Desk, releases a verified order with the adult signature required at delivery where the state requires it, cancels and refunds a failed one with the customer told, and records the verification method, the result and the time on the order in the order management system for the regulator and the carrier.
In scopeSimpleCallvu moves: chase and verify, decide
Last updated November 7, 2026.
The problem today
The vapor products shipped on a checkbox that said the buyer was over twenty-one, and the state's enforcement letter cited every order.
Age-restricted products sold online need more than a checkbox, and the states have been saying so: online tobacco and vapor sales require age verification by a method the state names and an adult signature at delivery; alcohol shipments need the licensed shipper's verification and the carrier's adult signature; several states restrict or prohibit shipping some products altogether. A retailer that relies on a date of birth typed at checkout ships to minors and to states it may not ship to.
The rules differ by product and by state: the minimum age, the accepted verification methods (a public records check, a document check, a database match), the delivery requirements, the licensing, the shipping prohibitions and the carrier's own rules. The verification is a step before release with a result to record, because the record is what the regulator and the carrier audit.
An order verified by the state's method and recorded is an order the retailer can ship and defend.
How it runs
From the requestto the system of record.
An order contains an age-restricted product at checkout or before fulfilment. Callvu holds the order and opens the verification.
- Customer
- Verifies age on a secure screen by the accepted method and signs for the delivery where required.
- Compliance desk
- Decides failed or inconclusive verifications and prohibited routes in the Decision Desk.
- Verification vendor and carrier
- Return the verification result and perform the adult signature delivery.
- Callvu
- Classifies, holds, verifies, routes, releases or cancels, and records.
Classify the restriction
The product's category and the delivery state classify the restriction: the minimum age, the verification method the state accepts for online sales, the licensing the seller needs, the delivery signature requirement, the shipping prohibitions by state and the carrier's rules for the product; a prohibited route stops the order at checkout with the reason.
Chase and verify
The order is held and the customer is asked on a secure screen to verify by the accepted method: a third-party verification of the name, address and date of birth against public records, a government identity document with a selfie and liveness check, or a database match where the state accepts it; the result is read (verified with the method and the confidence, failed, inconclusive) and a verification is chased inside the hold with the customer told the order waits for it; a prior verification on the account within the policy's validity is reused where the law allows.
Decide
A verified customer on a permitted route releases the order by rule with the adult signature required at delivery where the state requires it; a failed or inconclusive verification, a mismatch between the verified person and the account or the delivery address, a route the rules question, or a product whose rules changed goes to the compliance desk in the Decision Desk with the result and only the allowed outcomes (release with the signature requirement, require a stronger method, cancel and refund, or cancel and block the account for a repeat attempt).
Record and write back
The verification method, the vendor's reference, the result and the time, the signature requirement and later the carrier's adult signature confirmation are recorded on the order in the order management system, the system of record, a cancelled order is refunded with the stock released and the customer told, and the verification images are deleted on the policy's schedule while the result is retained for the regulator's period.
Where it ends: Every restricted order was verified by the state's method before release, delivered with the signature the state requires, or cancelled with the customer told, and the order holds the verification record the regulator and the carrier audit. The Decision Trace shows the restriction, the method and any decision; the Audit Trace shows the hold, the verification and the release or cancellation with time.
Runtime enforcement
What is enforcedwhile the work runs.
The regulations preloaded in Callvu Studio and the bank's own policies, applied as steps that run, not lines in a binder. A step that breaks a rule does not run, so a completed run was compliant.
The handoff
Between the front doorand the back office.
The front door
Checkout or the order hold; the customer verifies on a secure screen from a link.
The back office
The compliance desk decides only failures and route questions; fulfilment ships verified orders with the signature service.
The Decision Desk
- A failed or inconclusive verification, a person-to-account mismatch, a questioned route or a changed rule goes to the compliance desk in the Decision Desk with the result and only release with the signature requirement, require a stronger method, cancel and refund, or cancel and block.
Proof
In scope.Proof at scale, not one process at a time.
The kind of process Callvu runs in production for customers in this industry. Ask for a reference on this exact process. The results below are the industry's published proof; each claim code links to its record on agents.callvu.com.
More than 1,000 processes are live across Callvu customers.
Across Callvu customers
Questions
What buyers ask next,answered plainly.
How is age verified for an online order?
By the method the delivery state accepts: a third-party check of the name, address and date of birth against public records, a government identity document with a selfie and liveness check, or a database match; on a secure screen before the order is released.
Is a date of birth at checkout enough?
No. The state laws and the federal PACT Act for tobacco and vapor products require verification by an accepted method and an adult signature at delivery, and the order is held until it passes.
What is kept on the order?
The verification method, the vendor's reference, the result and the time, the signature requirement and the carrier's delivery confirmation, retained for the regulator's period, with the identity images deleted on schedule.
Related processes
Bring this process, or the one that costs you most.
We build it against your policies and your systems, train your team and stay with you through launch. You are live in weeks.