uk Technology & digital loss

What to do if…
your recently deleted folder is empty and you did not empty it

Produced and maintained by PanicStation.org Published: 27 May 2026 Last reviewed: 17 July 2026 Editorial policy UK guide

Short answer

Pause unnecessary device use and syncing where you can, then check the provider’s official recovery routes from a trusted device. At the same time, secure the account so no one can keep deleting or changing things.

Do not do these things

Don’t keep taking new photos, downloading large files, or running cleanup or optimiser tools on the same device while you are trying to recover data.
Don’t click support links from emails or texts about this incident; go through the provider’s official app, website, or support pages.
Don’t sign out everywhere until you have captured basic evidence, if you can do that without delaying urgent account security.
Don’t assume it was only a glitch; treat it as a possible sync setting, shared access issue, or unauthorised access until you have checked.

What to do now

Pause the device that noticed the problem.
If it is safe and practical, put that device in Airplane Mode or turn off Wi-Fi and mobile data. This only pauses that device; other signed-in devices or web sessions may still be active.
Use a trusted device to check the account.
Open the provider’s official website or app from a device you trust. Avoid links in messages about the deletion.
Capture quick evidence before screens change.
Screenshot the empty Recently Deleted, Trash, Bin, or Recycle Bin view. Also screenshot any recent activity, security events, signed-in devices, sharing settings, and third-party app access shown by the service. Note the time you first noticed the problem and which device you were using.
Check every recovery place the service offers.
Look for Recently Deleted, Trash, Bin, Recycle Bin, account recovery, data recovery, file restore, and backups. For cloud files, also check version history or restore previous versions where the service offers it.
Check shared access and other signed-in devices.
Review family sharing, shared albums, shared folders, work or school accounts, and any old phones, tablets, computers, or browser sessions that are still signed in. Remove access you do not recognise after you have captured the evidence you need.
Secure the account and its recovery email.
Confirm the recovery email and phone number are yours. Check the recovery email account for forwarding rules, filters, and security changes you do not recognise. Change the password for the affected account and for the recovery email account if there is any doubt. Turn on two-step verification or two-factor authentication, remove unknown sessions, and revoke unfamiliar third-party app access.
Ask the provider about recovery without guessing.
Contact the provider through its official support route and say: “My Recently Deleted, Trash, Bin, or Recycle Bin was emptied without my action. Is any server-side recovery available, and can you see signs of unauthorised access?” Give the timestamps and screenshots you saved.
Report suspected cyber crime or fraud through the correct UK route.
If there was phishing, extortion, account takeover, fraud, or another cyber crime, report it to Report Fraud if you are in England, Wales, or Northern Ireland. If you are in Scotland, Police Scotland says you can report cybercrime online, by phone, or in person; Report Fraud and the National Cyber Security Centre also signpost Scotland to 101. Call 999 only if there is an emergency.

What can wait

You do not need to decide today whether to replace hardware, switch providers, or pay for new storage.
You do not need to confront anyone immediately if you suspect shared access; first check access logs, sharing settings, and recovery options.
You do not need to factory reset a device as a first move unless official support or a trusted security professional advises it.
Long-term backup improvements can wait until the account is secure and you have checked recovery routes.

Important reassurance

This can feel like everything disappeared at once because deletion and syncing can happen quickly across devices. A short pause, careful evidence capture, official recovery checks, and account security steps give you a steadier path through the first few minutes.

Scope note

These are first steps only, focused on preventing further loss, checking recovery options, and securing access. Later decisions about devices, backups, disputes, or specialist help can wait until things are more stable.

Important note

This is general information, not legal, technical, financial, or professional advice, and it is not a guarantee of recovery. Recovery depends on the provider, your settings, whether items were permanently deleted, and how much time has passed. If anyone pressures you to pay urgently for recovery or asks you to install remote-control software, treat that as a red flag and use only official provider support channels.

Additional Resources

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us