Meta has agreed to an $18 billion settlement with a coalition of 52 state and territorial attorneys general, resolving a sweeping lawsuit that accused the company of knowingly designing Facebook and Instagram to hook children and harm their mental health. In exchange for avoiding a courtroom showdown, Meta will overhaul how minors use its platforms under what experts describe as the most far-reaching child-safety rules ever imposed on a major social network.

The headline number is eye-popping, but the money will be paid out over a decade, softening the financial blow for a company that generates more than $200 billion in annual revenue. Legal analysts note that the real stakes lay elsewhere: a trial could have invited rulings that chipped away at Section 230, the law shielding platforms from liability for user content, and raised new First Amendment questions about how far governments can go in dictating product design.

Instead, Meta walks away without admitting wrongdoing, while accepting a decade of close oversight and a long list of product changes aimed at teens. Those include default two-hour daily limits, prompts every 15 minutes to nudge “intentional use,” overnight lockouts between midnight and 6 a.m., and muted notifications during school hours. Teen accounts will default to more private settings, with “like” counts hidden by default and tighter controls on recommendations and messaging.

All of that depends on one fragile pillar: accurately knowing who is a child. The settlement effectively forces Meta to build a global age-verification regime at a time when the underlying technology remains unreliable and controversial.

Today’s age checks go far beyond the old “Are you 13?” pop-up. Platforms increasingly lean on biometric scans, government ID uploads, or behavioral analysis. Each method carries trade-offs. Algorithms misclassify adults as minors and vice versa. ID and face scans require users, including children, to transmit highly sensitive data that could be exposed in a breach. Even if companies promise not to store that information, experts warn that the act of transmitting it creates new attack surfaces for identity theft.

Privacy lawyers argue that so-called “age assurance” can be designed to minimize data retention, for example by issuing anonymous tokens that signal only an age band. But communications scholars and child-safety advocates caution that no system is yet both accurate, bias-free, and safe enough to justify the scale of surveillance required.

Meta, meanwhile, is casting the settlement as proof of leadership, publicly urging rivals like TikTok and YouTube to adopt similar safeguards. Under the agreement, a significant portion of Meta’s payout is tied to whether those competitors follow suit, effectively turning one company’s legal reckoning into a template for the entire social web.