UK Push for Device-Level Nude Blocking Rekindles On-Device Scanning Debate
The U.K. government said it wants Apple and Google to implement device-level controls that would stop minors from taking, sending, or viewing nude images, while requiring adults to complete age verification to access such content. Prime Minister Keir Starmer gave the companies about three months to comply voluntarily or face possible legislation and fines, presenting the measure as a child-safety response to grooming and pornography exposure. Supporters including child-protection advocates backed the proposal, while critics warned it would extend the U.K.’s broader online safety regime into smartphones, cameras, apps, and messaging platforms.
The proposal landed amid wider scrutiny of on-device content analysis across major platforms. Signal said mandatory client-side scanning would weaken encrypted communications and create infrastructure that could be repurposed for surveillance or censorship. At the same time, Google faced backlash over the quiet rollout of Android SafetyCore, a local image-classification service tied to sensitive-content warnings, while Apple unveiled expanded child-safety features in iOS 27, including broader sensitive-content detection for nudity and violent imagery. Meta is also developing an opt-in WhatsApp Scam Alert feature that analyzes suspicious messages locally without breaking end-to-end encryption, underscoring how vendors are increasingly turning to on-device moderation while trying to preserve privacy claims.

Get ahead of threats like this
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
How this story unfolded
5 events from the most recent confirmed update back to the earliest known activity.
Signal publicly criticizes the UK's proposed nude-image controls
Signal responded to the UK proposal by warning that client-side scanning or blocking would not protect children and would instead create surveillance infrastructure that weakens encrypted communications. The company said such mechanisms increase attack surface and could later be repurposed for censorship or state surveillance.
UK proposes device-level blocking of underage nude images
At London Tech Week, the UK government said it wants Apple and Google to ensure minors cannot take, send, or view nude images on iOS and Android devices, while adults would need age verification to access such content. Prime Minister Keir Starmer said companies have about three months to comply voluntarily or face possible legislation and fines.
Apple announces iOS 27 child safety enhancements at WWDC 2026
At WWDC 2026, Apple announced new child safety and parental control features for iOS 27, including redesigned Screen Time controls, website access requests handled through Messages, and expanded sensitive-content protection covering nudity as well as violent and gory media. The update also adds more granular parental time limits across app categories.
WhatsApp beta reveals on-device Scam Alert feature in development
WABetaInfo observed Meta developing a WhatsApp Android beta feature called Scam Alert that detects potentially fraudulent messages from unknown senders on-device. The feature is designed to preserve end-to-end encryption by analyzing messages locally and remains under development without a announced release date.
Google silently rolls out Android System SafetyCore
Google deployed Android System SafetyCore, a system service for Android 9 and later that supports on-device safety features such as Sensitive Content Warnings in Google Messages. Its appearance on devices without clear notice, consent prompts, or a visible app icon triggered privacy and transparency concerns.
Related entities
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Sources
10 references tracked. Mallory keeps watching after this page renders.
Les nouvelles fonctionnalités de sécurité pour les enfants d'iOS ...
zdnet.fr
Open sourceThis silent Android feature scans your photos for 'sensitive content' - how to uninstall it | ZDNET
zdnet.com
Open sourceWhatsApp Is Developing On-Device Scam Detection That Works Without Reading Message Content - gHacks Tech News
ghacks.net
Open sourceSignal: UK’s child-nude-block threat won’t protect children
theregister.com
Open sourcePrime Minister’s speech at London Tech Week 2026 - GOV.UK
gov.uk
Open sourceDigital Safety: Children - Hansard - UK Parliament
hansard.parliament.uk
Open sourceStarmer gives tech firms ultimatum to block explicit images on children’s phones | Internet safety | The Guardian
theguardian.com
Open sourceSignal Messenger
signal.org
Open sourceSee the full picture, correlated to your attack surface.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.


