Challenge 25 and Age Verification: What UK Bar and Retail Staff Must Do
What is Challenge 25?
Challenge 25 is a retailing standard that asks staff to request photo ID from anyone who looks under 25 when they try to buy alcohol, even though the legal purchase age is 18. It is best practice, not a law. Challenge 25 is the accepted way that pubs, bars, shops and other licensed venues meet their actual legal duty, which is to verify the age of anyone who appears to be under 18.
That distinction matters more than it sounds. If you run a venue or train staff, you need to know what the law actually says, separately from the industry standard almost everyone follows to stay on the right side of it. Get the two mixed up in a licence review or a staff briefing and you’re on shaky ground.
What the law actually requires
Every premises licence in England and Wales carries a mandatory condition: the venue must operate an age-verification policy that requires photo ID, showing date of birth, from anyone who “appears to be under 18.” This condition is set out in the Mandatory Licensing Conditions Order, and it’s one of the fixed conditions attached to every licence, not something a venue can opt out of.
The law doesn’t name a number above 18. It says the policy must catch anyone who appears to be under 18, “or such older age as may be specified in the policy.” That’s the gap Challenge 25 fills: a venue’s own policy sets its ID-check threshold at 25, well above the legal age, as a safety margin against staff misjudging someone’s age. The 18 is the law. The 25 is the venue’s chosen buffer.
This sits within the broader framework of the Licensing Act 2003, which governs premises licensing, personal licences and the four licensing objectives in England and Wales. Age verification is one of several conditions attached to a premises licence, alongside rules on promotions and on offering smaller measures.
Challenge 25 vs Challenge 21
Challenge 25 replaced the older Challenge 21 as the industry norm because a wider buffer catches more borderline cases. Someone who’s 19 or 20 can still look under 21 to a member of staff working a busy shift, and a missed check at that age is still an underage sale if the customer turns out to be under 18. Setting the bar at 25 gives staff a much bigger margin for error and makes the ID check a default habit rather than a judgement call made shift by shift.
Most bars, pubs, supermarkets and off-licences across the UK now run on Challenge 25 rather than Challenge 21. Some venues still display Challenge 21 signage, usually left over from before the shift, but it’s worth updating: it signals a lower standard than the one your staff should actually be applying.
Acceptable forms of ID
Challenge 25 policies typically accept the following as valid proof of age:
- Passport (any nationality)
- Photo-card driving licence
- PASS-hologram proof-of-age card (from the UK’s national Proof of Age Standards Scheme)
- Biometric residence permit (BRP)
A student card, a work ID badge or a printed birth certificate isn’t proof of age under Challenge 25. If someone can’t produce one of the four documents above, the correct response is to refuse the sale, not to make a judgement call based on how they answer questions.
Staff responsibilities and the reasonable-steps defence
Asking for ID is only half the job. The other half is what happens when someone can’t or won’t produce it: the sale gets refused, and it gets recorded. A refusals log, even a simple one, does two things. It gives the venue a paper trail showing the policy is actually being applied, not just written down. And it supports what’s often called a due-diligence or reasonable-steps defence: if a venue can show staff were trained, ID was asked for consistently, and refusals were logged, that’s a materially stronger position at a licence review or after a test purchase than a venue with no record at all.
This is also where staff need clear backing from management. Refusing a sale to someone who’s angry, embarrassed or insistent is an uncomfortable moment for a new starter. Staff who’ve been trained on how to refuse politely and firmly, and who know the venue has their back, are far more likely to actually challenge for ID rather than wave someone through to avoid a scene.
What happens if it goes wrong
Selling alcohol to someone under 18 is a criminal offence. The member of staff who makes the sale can be fined (a level 5 fine on the standard scale), so the person behind the till carries real personal risk. Beyond the individual, a poor age-verification record is exactly the kind of failure that puts the premises licence itself at risk at a review, shows up in the aftermath of a failed test purchase carried out by police or trading standards, and damages a venue’s standing with its insurer.
None of that is designed to be alarming for its own sake. It’s the reason Challenge 25, done consistently, matters commercially as well as legally. A venue with a genuinely applied policy, trained staff and a refusals log is in a defensible position. A venue that “sort of” checks ID when it feels like it isn’t.
Does this apply in Scotland?
The legal duty to verify age applies across the UK, though the way it’s built into staff training differs. In Scotland, age verification isn’t left to a general licence condition backed by industry practice: proof of age, and the offences involving the sale of alcohol to under-18s, are explicit prescribed subjects within Scotland’s mandatory staff training. Every person who sells or serves alcohol in Scotland has to complete that training before serving alcohol, covering age verification alongside 15 other required subjects.
If you’re training staff for a venue in Scotland, start with our Scotland alcohol laws guide, which sets out the mandatory training requirement in full. This page is written for England and Wales, where general staff training isn’t a legal requirement in the same way, but the underlying age-verification standard, and the sense in training staff to apply it properly, is the same either side of the border.
How training embeds Challenge 25 into everyday practice
Knowing the rule and applying it consistently under pressure, on a Friday night with a queue at the bar, are different things. That’s what staff training is actually for: it turns Challenge 25 from a poster behind the till into a habit staff fall back on without thinking.
ServeWise Online’s Responsible Service of Alcohol course covers age verification and Challenge 25 as a core module, alongside refusing service, understanding units, and handling the licensing objectives day to day. It’s fully online, takes around two hours, and ends with a Record of Training you can keep on file, useful evidence if your policy is ever questioned. We’ve trained more than 55,000 people since 2008.
Get your team confidently applying Challenge 25. Start with the England & Wales responsible service of alcohol course, or if your venue is in Scotland, the Scotland responsible service of alcohol course. £35 per person, done online, ready the same day.
Frequently asked questions
Is Challenge 25 a legal requirement?
No. Challenge 25 is best practice, not law. The legal requirement is to operate an age-verification policy that asks for ID from anyone who appears to be under 18. Challenge 25 is the accepted industry standard for meeting that duty, using 25 as a safety buffer above the legal age of 18.
What ID is acceptable in England and Wales under Challenge 25?
A passport, a photo-card driving licence, a PASS-hologram proof-of-age card, or a biometric residence permit. Other forms of ID, such as a student card or work badge, aren’t accepted as proof of age.
What’s the difference between Challenge 21 and Challenge 25?
Both ask staff to check ID above the legal drinking age of 18. Challenge 25 uses a wider buffer than the older Challenge 21 standard and has become the UK industry norm because it catches more borderline cases where someone’s age is hard to judge.
Who is responsible if an underage sale happens?
The staff member who makes the sale commits a criminal offence and can be fined. Beyond the individual, an underage sale puts the premises licence itself at risk at a review, so training staff and keeping a record of refusals protects the venue, not just the person behind the bar.
Does Challenge 25 apply in Scotland?
The legal duty to verify age applies across the UK. In Scotland, it’s built directly into the mandatory staff training that every server must complete before their first shift, which explicitly covers proof of age and the offences involved in serving under-18s.
Train your team on age verification the easy way. Choose your course: the England & Wales RSA course or the Scotland RSA course (mandatory). £35 per person, around two hours, fully online. Training 10 or more? Ask about bulk pricing.
