Under new rules, users may be asked to prove they own a credit card or confirm their age via a third-party service.