Coal miners carried canaries because poison gas killed the birds first. The adult entertainment industry is the canary for the rest of the commercial internet — not because they’re marginal, but because they’ve always been first. First to hit the wall. First to find out what happens when the financial system decides your business is too risky to exist.
In August 2021, OnlyFans told its creators that sexually explicit content would be banned. The CEO said it publicly — banking partners and payment processors had demanded it. The decision was reversed a week later, but by then subscribers had canceled, creators had scattered, and the lesson was permanent: the platform didn’t make a content decision. A bank did.
This wasn’t the first time. In December 2020, card networks cut off processing for one of the largest adult platforms on the internet — after a single newspaper column. By 2021, every adult content platform was required to pre-review all content before publishing, monitor streams in real time, and maintain identity records for every performer. By 2022, advertising revenue was blocked.
The stated reasons are always real. Fraud prevention. Compliance. Legal risk. But the mechanism that follows is not proportional. Legal businesses, legal content, legal transactions — shut down without warning, without process, without recourse. A risk decision at a boardroom table, and someone’s income disappears.
They Are No Judges
Call it what it is: payment rails are governance infrastructure. Not in the metaphorical sense. In the operational sense. They determine who can transact, under what conditions, and subject to whose approval. That’s governance. It just doesn’t look like governance because nobody elected Visa.
A judge has to show their reasoning. A judge can be overruled. A judge operates within a system designed to check power. Card networks answer to shareholders and reputation risk. They weren’t elected. They weren’t appointed. They have no jurisdiction, no oversight, no appeals process. They assumed the role of moral arbiter because no one stopped them — and because the first industries they targeted were ones nobody wanted to defend publicly.
A government that wanted to shut down a legal industry would need legislation, debate, due process, judicial review. A card network needs a policy update and a compliance email. The outcome is the same — a legal business can no longer operate — but the mechanism bypasses every democratic safeguard that’s supposed to prevent exactly this.
Operation Choke Point made this explicit. Between 2013 and 2017, the U.S. Department of Justice pressured banks to cut off accounts for industries it considered “high risk” — payday lenders, firearms dealers, coin dealers, adult entertainment. No new laws were passed. No judicial orders were issued. The DOJ simply made it clear to banks that serving these industries would invite regulatory scrutiny. The banks complied. The industries lost access to the financial system.
The program was officially ended. The mechanism wasn’t. Banks still make risk decisions. Card networks still set content policies. Payment processors still terminate accounts. The difference between Operation Choke Point and business-as-usual is that someone named the program. The capability exists whether it has a name or not.
And here’s the operational truth behind all of it: nuance is expensive. Evaluating individual merchants, individual transactions, individual cases — that requires judgment, staffing, context, appeals infrastructure. It requires doing the work of a judiciary. But a blanket ban on a category code? That’s one memo. One phone call. One afternoon.
Centralized systems trend toward blunt instruments not out of malice but because precision doesn’t scale within their architecture. When you’re liable for everything flowing through your rails, and the details are messy, the rational move is to stop looking at details entirely and cut the category. The mechanism isn’t cruel. It’s lazy. And lazy is worse, because lazy doesn’t know when to stop.
The Privacy Inversion
There’s a secondary consequence that gets less attention. Every compliance requirement imposed on payment rails generates data. Identity verification creates identity databases. Transaction monitoring creates transaction logs. Content review requirements create content archives.
For most industries, a data breach is embarrassing. For adult content, it’s existential. People have been blackmailed with purchase histories from adult platforms. Careers have been destroyed because a name appeared in a database that should never have existed.
The industry’s response, imposed by the same card networks that caused the problem, has been to require more data, not less. More ID verification. More records. More databases that become bigger targets. The compliance apparatus designed to control the payment rail produces, as a byproduct, an ever-expanding attack surface for the people it claims to protect.
This is the privacy inversion: the mechanism designed to make transactions “safer” makes the participants less safe. And it compounds. Each new requirement adds another field to the database, another system that can be breached, another record that can be subpoenaed.
The people with the most to lose from exposure are forced to provide the most data. That’s not a policy failure. That’s the policy working as designed — for someone else’s definition of “working.”
Societies have always projected their discomfort onto the industries that mirror what they’d rather not see. But suppressing the shadow doesn’t make it disappear. It just makes the database bigger.
The Phone Number
Every private payment rail is a company. Every company has a phone number. And anyone with enough leverage — a regulator, a senator, a journalist with a column — can call that number and apply pressure.
The architecture of centralized payment processing isn’t just vulnerable to this. It’s an invitation. The phone exists. The pressure will come. The only variable is who calls and what they want shut down.
A public protocol has no phone. Bitcoin doesn’t have a compliance department. Lightning doesn’t have a risk committee. There’s no one to call, no one to pressure, no one who wakes up Monday morning worried about brand risk. The protocol doesn’t care because it can’t care — and that inability is the point.
This isn’t about ideology. The adult industry didn’t adopt online payments before Amazon because of a philosophical commitment to financial innovation. They did it because the alternative was not getting paid. They’ll adopt the blind rail for the same reason: every system with a phone number will eventually get the call. They’ve answered it enough times to know.
The Close
The adult industry didn’t choose to be the canary. It was put in the mine because it was the industry nobody would defend publicly. Every processor that dropped them, every platform that folded under a phone call — that was the rest of the commercial internet’s future, arriving early.
The financial system has a kill switch. They found it first.
A public protocol doesn’t have one.