Ofcom’s chief executive told Parliament on October 20, 2026, that the regulator may never recover every fine it issues under the Online Safety Act. That admission puts a number on a problem building since March 2025: 11 fines issued, two paid, and a £520,000 penalty that a US-based forum reportedly answered with an AI-generated hamster.
Ofcom issued 11 fines since March 2025, and only two have been paid.
4chan, a Hamster, and a £520,000 Bill
The 4chan case has become the clearest test of how far a UK regulator can reach across borders.
Ofcom fined 4chan a combined £520,000, broken across separate penalties for age assurance failures, an illegal-content risk assessment failure, and related Online Safety Act duties. The forum has not paid. Its lawyer, Preston Byrne, argues that 4chan has no UK staff, servers, or assets, meaning collection would likely require proceedings in the United States.
Byrne reportedly replied to Ofcom’s payment demands with an AI-generated hamster image. He later described the exchange in reported remarks: “We replied with a hamster. Again.”
A US federal court dismissed 4chan’s own lawsuit against Ofcom on jurisdictional grounds. That court also noted, according to available reporting, that US courts are not necessarily required to enforce foreign penal judgments, leaving the fine intact while complicating any practical recovery.
“We won’t be able to recover every single fine on online safety.” Dame Melanie Dawes, Ofcom chief executive, evidence to the UK Parliament’s Digital, Culture, Media and Sport Committee, October 20, 2026.
Compliance Over Cash: How Ofcom Is Reframing Success
Ofcom is presenting behavioral change as the primary measure of enforcement, not money collected.
Of the 11 fines issued since March 2025, two have been paid, one is under appeal, one was not yet overdue, and nine remain unpaid, according to Ofcom’s account to MPs. Among those nine unpaid cases, two pornography services introduced effective age assurance, four services geo-blocked UK users, and three remain accessible with their risks unmitigated.
Ofcom said its toolkit for pursuing overseas money includes domestic courts for any UK assets. Additional options include debt-recovery specialists, financial investigators, foreign courts, and local law-enforcement agencies.
Blocking orders against non-compliant services are also available. Ofcom acknowledges those orders can be circumvented, and VPNs are one commonly cited method.
Dame Melanie Dawes told MPs that Ofcom measures success not only by money recovered but by whether fined services introduce age checks, mitigate illegal-content risks, or remove UK access. For platforms with no UK assets, the practical enforcement lever is access restriction rather than a financial penalty.
The stakes are rising. The UK government has indicated that under-16 social-media restrictions could come into force in 2027, requiring platforms to deploy effective age assurance for every user, not just for specific content. Dawes told MPs those rules would be “much more draconian” for Meta than any US settlement the company has faced.
Whether access restrictions prove sufficient depends on how reliably age assurance can be deployed at scale. It also depends on how many users route around a block entirely.
