Phishing is a risk for every online service, including banking, and the defences here are layered. You do not have to find or judge an age assurance provider alone: the digital service you are accessing chooses which providers to integrate, and platforms carry out due diligence because their reputation depends on it. Certification bodies publish public registers of audited providers that anyone can check. Regulators can act against imposters, and emerging interoperability schemes (see below) vet every provider in their network. A fraudster can imitate a brand. They cannot get onto an official register or join a well-managed network of providers.