Industry Solution
That date-of-birth pop-up on your winery website isn't fooling anyone — especially not the ABC. States are tightening enforcement on online alcohol sales, and "Are you 21?" checkboxes don't count as verification. XY Zinc provides real, ID-backed age verification with government document checks and biometric face matching — without storing your customers' personal data.
Nearly every winery, brewery, distillery, and online liquor store has some form of age gate on their website. Usually it's a pop-up: "Enter your date of birth" or "Click here to confirm you are 21 or older." The visitor clicks. The gate opens. No verification actually happened.
For years, these "age affirmation" gates were considered sufficient — a reminder more than a barrier. But the regulatory environment has shifted. States are now requiring real third-party age verification at the point of sale for online alcohol purchases, and Alcohol Beverage Control (ABC) agencies, the TTB, and state attorneys general are actively auditing compliance.
Selling alcohol to a minor — even inadvertently, even online — is illegal in every state. Ignorance is not a defense, and state regulators take this seriously. Penalties range from fines to license suspension to criminal charges depending on the jurisdiction.
States like California, New York, and Texas have introduced tighter ID verification protocols for all alcohol sales in 2025, with some now requiring electronic scanning devices and biometric age verification. California's new laws specifically call out biometric age verification to prevent sales to minors.
Regulatory "sting" operations — where agents attempt to purchase alcohol online as minors — are increasingly common. Businesses caught selling through inadequate age gates face fines, negative press, and the very real risk of losing their license.
The Wine Institute now encourages electronic age verification of the purchaser in addition to age affirmation gates. The direction is clear: a checkbox is the minimum, not the standard. Businesses that invest in real verification now are protecting themselves against an enforcement environment that is only getting stricter.
Direct-to-consumer wine shipping is a multi-billion dollar market operating across complex state-by-state rules. Most states require age verification at multiple stages: site access, point of purchase, and delivery. An age affirmation gate only covers the first step — and barely at that.
Brewery websites with online ordering, merchandise tied to alcohol purchases, or event ticketing for 21+ events all need age gating. As more breweries add ecommerce and delivery, the compliance requirements follow.
DTC spirits shipping is newer and more restricted than wine — currently available in only a handful of states like Kentucky, Nebraska, New Hampshire, Colorado, and Ohio. Where it is permitted, age verification requirements are strict and heavily scrutinized.
Third-party delivery platforms and online liquor stores face compounding requirements: the alcohol license holder remains legally responsible for age verification even when a delivery app handles fulfillment. Robust point-of-purchase verification reduces your exposure.
XY Zinc replaces your pop-up age gate with real, ID-backed verification — confirming your customer's exact age via government-issued ID with biometric face matching. Once verified, a cookie is set so the customer browses and checks out without interruption. One verification covers both site access and purchase compliance.
Why 21+ requires ID: Our biometric face scan (Tier 1) estimates the probability that someone is 18 or older. For the 21+ threshold required by U.S. alcohol laws, a face scan alone can't reliably distinguish a 19-year-old from a 22-year-old. That's why alcohol customers use our full Tier 2 verification with government ID, which confirms exact date of birth.
Tier 1 — Biometric Face Scan (Liveness Check): A quick face scan confirms the customer is a real person — not a bot, not a static photo, not an AI-generated image. This liveness detection step screens out obvious minors and prevents spoofing before any ID is involved.
Tier 2 — Government ID + Face Match (21+ Verification): The customer photographs a government-issued ID. Our system extracts the date of birth, calculates their exact age, and matches the face on the document to the live face scan. This definitively confirms 21+ status. The ID image and all extracted data are immediately discarded — we never store the document.
Traditional age verification providers for alcohol — companies like LexisNexis and IDology — work by cross-referencing your customer's name and address against public records databases. That means collecting and transmitting PII: full names, home addresses, sometimes Social Security Numbers. XY Zinc takes a fundamentally different approach.
Images exist only in server memory (RAM) during the verification process and are automatically deleted within 15 minutes — or immediately upon completion. Nothing is ever written to disk. This aligns with the data minimization principles required by CCPA, state privacy laws, and industry best practices for handling customer PII.
Every verification generates a timestamped, anonymized record. When ABC auditors or state regulators ask how you verify customer age online, you have documented proof that real, third-party ID verification took place — not just a checkbox that anyone could click. Records are available through your admin dashboard and can be exported for compliance reviews.
Direct-to-consumer alcohol shipping involves multiple layers of age verification. XY Zinc replaces the weakest layers — the site age gate and the point-of-purchase check — with a single real verification step. When a visitor verifies through XY Zinc, they receive a cookie confirming their 21+ status. That cookie serves as both the age gate (no more pop-ups) and the verified-age proof that can be checked at checkout without asking for ID again.
Replaces your "Are you 21?" pop-up with real, third-party ID verification. Government ID + biometric face match confirms the visitor is 21+. A verified cookie is set, so the customer moves through your site and checkout without being asked again. One verification, two compliance layers covered.
Your agreement with FedEx, UPS, or other carriers flagging shipments as containing alcohol and requiring adult signature at delivery.
The carrier checks the recipient's ID and collects a 21+ signature at the door. Required in all states that permit DTC shipping.
By combining site gating and purchase verification into a single step, XY Zinc gives your customers a smoother experience while giving you stronger compliance than a pop-up and a checkbox could ever provide.
XY Zinc is designed to drop into your existing website with minimal development effort. Most wineries, breweries, and liquor stores run on one of a few common platforms — and we support them all.
Our WordPress plugin lets you gate your entire site or specific pages and product categories. For WooCommerce stores selling alcohol, you can require verification before checkout — a single settings page, no code changes required.
For custom-built ecommerce sites, Shopify storefronts, or platforms like VinoShipper or Commerce7, our REST API and JavaScript embed provide full control. Create a verification session, redirect the customer, check the result — all with a few API calls.
For businesses with a fixed location — a tasting room, a liquor store, a brewery taproom — integration is even simpler. Your physical location determines which jurisdiction's rules apply, so you hardcode your region and skip geo-detection complexity entirely. A winery in Napa always applies California rules.
No opaque enterprise pricing. No annual contracts. You pay per verification attempt. For alcohol (21+ threshold), verifications use Tier 2 to confirm exact age via government ID.
Tier 1
$0.05
per attempt
Biometric face scan & liveness check. Confirms 18+ and screens out obvious minors. Preliminary step for 21+ workflows.
Tier 2 — Recommended for Alcohol
$0.15
per attempt
Government ID scan + face match. Confirms exact date of birth for definitive 21+ verification. Full document verification with immediate data deletion.
Pricing shown is for sites processing approximately 100 verifications per day. No hidden fees. No minimums. Discounts available for higher-volume sites — contact us to discuss your needs.
Alcohol regulation in the U.S. is a patchwork of state-by-state rules, but the trend is unmistakable: every state that permits online sales or DTC shipping is tightening enforcement around age verification. Here's a snapshot.
| State / Body | What's Happening |
|---|---|
| Federal (All States) | Every state requires 21+ age verification for alcohol sales. All DTC shipping states require adult signature and ID check at delivery. The TTB and ABC agencies conduct audits and can request records at any time. |
| California | 2025 laws include biometric age verification to prevent sales to minors. New DTC shipping law for distilled spirits. CCPA/CPRA requires data minimization in any verification process. |
| New York | Tighter ID verification protocols for all alcohol sales in 2025. Mobile driver's license (MiD) accepted. Purchaser DOB may be required for audit purposes. |
| Texas | No explicit scanning mandate, but penalties for selling to minors include fines up to $4,000, license suspensions, and felony charges for accepting fake IDs (up to 10 years). |
| Massachusetts | Requires double age verification at retail. Penalties: $10,000–$100,000+. Electronic scanning encouraged across all alcohol sales. |
| HI, MI, WI & Others | Require detailed shipment reports including purchaser and/or recipient date of birth. Records must be retained 2–4 years and are subject to audit. |
This table is provided for general awareness and does not constitute legal advice. Consult with a beverage alcohol compliance attorney for requirements specific to your jurisdiction and license type.
Real age verification protects your license, your reputation, and your customers' privacy. Get compliant before the next ABC audit — not after.