As internet users become desensitised to handing over their confidential information to websites, we could see attackers spoofing age verification domains in a bid to steal confidential information, such as passport details or driving licences. These phishing attacks are especially dangerous because they appear entirely plausible in the context of the Act.

https://professionalsecurity.co.uk/news/interviews/online-safety-act-a-well-intentioned-disaster/