‘iCloud storage full’ scam targets data – how to stay safe

Fraudsters are now exploiting a new and convincing trick, sending emails that claim your iCloud storage is full or about to run out. The goal is to panic you into clicking malicious links that can expose your personal and financial details.

Here’s what you need to know to stay safe.

How the scam works

It typically starts with an email or text message claiming your iCloud account has been blocked and that your photos and videos are at risk of being deleted. The message urges you to ‘upgrade immediately’ to avoid losing your data.

You may receive follow-up emails, sometimes within a day, warning that if you fail to act, your iCloud data will be permanently wiped. These messages often becomes more and more urgent, using phrases like:

• “final warning”
• “your data will expire today”
• “immediate action required”

Each email includes a button or link prompting you to upgrade your storage.

If you click the link, you’re taken to what appears to be a legitimate Apple website. But really, it’s a carefully crafted phishing page designed to steal your details. If you enter payment information or login credentials, scammers may attempt to access your bank account or sell your data to other criminals online.

What makes this scam particularly effective is that many people genuinely do receive real storage warnings from Apple, making the fake emails much harder to spot.

How to spot a fake iCloud email

Although these messages can look convincing, there are several red flags to watch out for:

• Suspicious email address: check what comes after the “@”. Scam emails often use odd domains like “.biz.ua” instead of official ones.
• Not from Apple domains: genuine emails will come from addresses ending in @apple.com or @icloud.com.
• Spelling and grammar mistakes: poor wording, typos, or awkward formatting are common signs of fraud.
• Generic greetings: messages like “dear customer” instead of your actual name.
• Low-quality design: blurry logos or inconsistent branding.
• Unnecessary urgency: scammers rely on panic to rush your decision-making.
• Unexpected warnings: especially if you know you have plenty of storage or don’t even use iCloud.

What you should do

If you receive a suspicious message like this:

• don’t click any links or download attachments
• check your storage directly on your device via settings and then iCloud
• visit iCloud.com manually by typing the address into your browser
• delete the email immediately
• report the scam by forwarding it to:
• [email protected]  
• [email protected]  

If you’ve already clicked the link

Act quickly to protect yourself:

• change your Apple ID password immediately
• review your payment methods for any unauthorised transactions
• enable two-factor authentication if it’s not already on
• contact your bank if you entered financial details.

Remember, when in doubt, don’t click, go directly to official sources and verify everything yourself.