If you’ve opened your inbox today and seen a panicked message claiming your photos and videos are about to be deleted, you aren’t alone. A high-pressure phishing scam is currently circulating in the UK, targeting users with threats of immediate data loss.
Here is everything you need to know to stay safe and why you should never click that attachment.
The Red Flags: How to Spot the Scam
Looking at the screenshot provided, this email uses classic "social engineering" tactics designed to make you act before you think.
Artificial Urgency: The subject line screams "Your photos and videos will be deleted on 2025.12.29." By giving you a deadline of today, the scammers hope you’ll panic and bypass your usual caution.
The Suspicious Sender: The email comes from "Storage Notification 421." Real companies like Google, Apple, or Microsoft use verified, professional sender names and official domains (e.g., @microsoft.com), not generic names followed by random numbers.
The PDF Bait: Notice the attachment with the gibberish filename? Scammers use small PDF files to hide malicious links. Because many email filters are better at scanning text than PDF contents, this is a common trick to land in your main inbox.
Generic Branding: There is no official logo, no mention of which "account" is being blocked, and no personalized greeting.
What Happens if You Click?
If you open that PDF and click the "Take Action" link inside, you will likely be taken to a fake login page that looks identical to a real service (like iCloud or Outlook).
Credential Theft: If you enter your email and password, the scammers now have full access to your real account.
Identity Fraud: Once inside, they can steal personal documents, contact your friends for money, or reset passwords for your banking apps.
Malware: In some cases, clicking the link can trigger a download that installs "spyware" on your device.
What Should You Do?
If you receive an email like the one in the image:
DO NOT open the attachment. Do not click any links or "unsubscribe" buttons within the email.
Check your storage manually. If you are worried about your storage space, go directly to the official website (e.g., photos.google.com or icloud.com) or use the official app on your phone. Never use a link provided in an unexpected email.
Report it. Forward the email to the UK’s Suspicious Email Reporting Service (SERS) at
report@phishing.gov.uk.Delete and Block. Mark the email as spam and delete it permanently.
"I Already Clicked... What Now?"
If you’ve already interacted with the email or entered your details:
Change your passwords immediately for that account and any others where you use the same password.
Enable Two-Factor Authentication (2FA). This adds a vital second layer of security that stops hackers even if they have your password.
Run an antivirus scan on your device to ensure no hidden files were downloaded.
Stay vigilant, UK. Scammers rely on your fear—don't give them the satisfaction.
