Reddit and Discord are both in trouble over controversial age verification service

The UK Information Commissioner’s Office fined Reddit £14.47m (~$19.5m) for unlawfully processing children’s personal data after relying on third-party age-verification provider Persona, whose selfie/ID checks were deemed inadequate under the Online Safety Act. Discord also trialed Persona and faced user backlash over potential access to government records and has ended the test; the episode has reignited calls for app-store level age-gating responsibilities for Apple and Google. The ruling highlights heightened regulatory and compliance risk for social platforms using external identity verification and could increase costs and operational constraints across the sector.

Analysis

Market structure: Short-term winners are app-store gatekeepers (AAPL) and large platforms that can centralize verification; losers are consumer-facing social/gaming platforms (RDDT, RBLX) and third-party ID vendors (Persona). Expect a modest transfer of pricing power to platform owners who can offer single-source age verification and potentially monetize it; smaller apps face higher compliance costs that compress margins by an estimated 100–300bp over 12–24 months.

Risk assessment: Tail risks include widescale multi-jurisdictional fines or class actions (low-probability, high-impact) that could wipe out 10–30% of market caps for vulnerable mid-cap platforms within 6–12 months. Immediate (days) risk is reputational volatility and user churn; short-term (weeks–months) is higher implied volatility and credit spread widening (~10–30bp for BBB tech credits); long-term (quarters) is structural product redesign and potential OS-level regulation.

Trade implications: Favor defensive exposure to Apple (platform/verification winner) and tactical downside protection on social/gaming names. Expect elevated options IV on affected tickers for 1–3 months — use puts on RDDT/RBLX to hedge and call spreads on AAPL to express the winner with limited capital. Cross-asset: allocate small duration hedges in corporate bonds if tech credit spreads blow out; FX impact is negligible.

Contrarian angles: The market may over-penalize individual fines (Reddit’s £14.5m is modest vs. revenue) while underpricing the structural shift toward OS-level verification which could ultimately consolidate power with Apple/Google. Historical parallel: initial GDPR fines spiked volatility then normalized; if Apple refuses to run verification, third-party vendors could pivot to privacy-preserving solutions and recapture share, creating a >12–24 month recovery trade for select vendors.

Key Decisions for Investors

• Establish a 2–3% short-equity-equivalent position in RDDT (or buy 3-month ATM puts sized to 2–3% portfolio exposure) within 5 trading days to capture near-term reputational/volatility weakness; set stop-loss at a 10% adverse move and target a 15–30% downside within 3 months.
• Deploy 3–5% net long AAPL via 6–12 month call spreads (buy calls / sell higher strike calls) to express platform monetization upside; target 10–20% absolute gain or exit on passage of binding app-store verification legislation (monitor UK ICO rulings and US state bills over next 90 days).
• Initiate a relative-value pair: long AAPL 4% / short GOOGL 3% to capture likely rotation to trusted OS-level verification; rebalance or close after 6 months or if regulatory language forces identical liabilities on both stores (monitor legislative developments weekly).
• Buy 3–6 month puts on RBLX sized to 1–2% portfolio as downside insurance; if additional ICO/FTC fines exceed cumulative £50m or similar rulings occur in two jurisdictions, increase protection to 3–4% and consider converting to outright short.