first, the email in the photo goes nowhere. its west-midlands.pnn.police.co.uk, not "uk" unless DNS in the UK does something we're not supposed to know about
Second, theres no mx or mailserver there...the SOA is AWS though...
THIRD:
If I see a kid with a $200 wireless hacking toolkit running TOR on a Kali KVM hypervisor full of metasploit nodes and actively discussing the whole thing on discord, and its my kid, im calling the local university.
Nope, police.uk is a real valid domain name that the UK police have been using for years. That isn't a sign this is a fake, although it may well be.
Registrations at the second level of ccTLDs is not uncommon, and Nominet has relatively recently opened .uk registrations to anyone, after a period of trademark and .co.uk-holders only.
Second, theres no mx or mailserver there...the SOA is AWS though...
THIRD:
If I see a kid with a $200 wireless hacking toolkit running TOR on a Kali KVM hypervisor full of metasploit nodes and actively discussing the whole thing on discord, and its my kid, im calling the local university.