Discord had a clear goal to verify that adults are adults and to prevent predators from being predators, at least on their platform. It managed to turn that into a disaster for everyone involved.
Earlier this month, the company announced that all 200 million users would be defaulted to teen-appropriate restrictions starting in March, unless they do a face scan or provide a government ID. This new requirement in itself was enough to cause a massive user backlash. But the timing didn"t help either - just four months prior, hackers had stolen roughly 70,000 government ID images from Discord"s third-party provider, Persona. Asking users to provide their biometrics right after such an event was, well, you get the picture.
It got worse. Discord"s verification partner, Persona, turned out to be backed by Peter Thiel"s Founders Fund and linked to Palantir. That"s the same Thiel who co-founded Palantir, a company that builds surveillance systems for U.S. intelligence agencies and delivers "an AI-powered kill chain" that enables "the autonomous tasking of sensors, from drones to satellites" for locating and eliminating military targets.
Researchers then found Persona"s code sitting on a U.S. government-authorized endpoint, running 269 distinct verification checks, including screenings for terrorism and espionage. Discord had been quietly running a Persona test in the UK without telling users. The dots weren"t hard to connect.
In the midst of all this, Discord CTO Stanislav Vishnevskiy admitted today that the company "missed the mark." The planned March implementation of new identity verification rules is being delayed until the second half of 2026, and Discord is making structural changes before it tries again.
For starters, Persona is out. Discord cut ties with the company, stating it "didn"t meet the new bar" for verification partners, specifically that "facial age estimation must be performed entirely on-device, meaning your biometric data never leaves your phone." Discord also promised to publish a full vendor list, so users know who actually handles their data going forward.
Discord insists that over 90% of users will see zero change regardless, with internal systems already inferring adult status from account age, payment history, and server activity. Credit card verification is being added as an alternative for the minority who do need to confirm their age manually.
Whether users trust any of this is a different question entirely.