There is no way to prove definitively that the person using the credential is the same person using the Internet. Hell there's barely enough of a way to prove that there is a human sitting behind your device.
This is why age/identify verification is pointless.