Alert for Apple Users: Beware of the Malicious iCloud Storage Scam Threatening Photo Deletion!

For some time now, you’ve been receiving notifications from Apple stating that “your iCloud storage is maxed out”. These notifications warn that you’ve surpassed your storage limit, which means documents are no longer being backed up and new photos aren’t being uploaded.

Despite Apple’s attempts to persuade you to purchase additional storage for at least 99p a month, you’ve been resistant. However, it now seems unavoidable: you’ve received an email stating your iCloud account is blocked and your photos and videos will soon be deleted. The email urges you to upgrade immediately to preserve them.

The following day, another email arrives warning that your data will be erased on a specified date unless you take immediate action.

These emails feature a button to upgrade your iCloud storage. However, these ominous messages are part of a scam posing as Apple’s iCloud service, with the perpetrators aiming to trick you into clicking a malicious link.

Clicking the link leads to a site that may appear legitimate but is actually a phishing site designed to collect users’ banking and personal information.

If you input your banking details or make a payment, these fraudsters might then attempt to withdraw more money or sell your information to other criminals on the dark web.

This scam can seem particularly convincing because it may coincide with legitimate warnings from Apple about running out of storage space and the need to upgrade.

The UK consumer advocacy group Which? recently alerted its Facebook followers about this deceptive scheme, stressing the importance for all Apple users to be aware.

Appearance of the Scam

This scam takes several forms. One version seen by the Guardian reads in the subject line: “We’ve blocked your account! Your photos and videos will be deleted on [date].” The email is titled “iCloud Storage Alert” and claims: “Storage limit reached… your iCloud account has reached its maximum storage capacity.”

Another variant states: “Your payment method has expired!… Your cloud service has been disabled.”

Some scam emails appear less intimidating, like one titled “Payment failed for your Cloud storage renewal.”

In nearly all scenarios, there is a button to “update” your payment method or “manage” your storage.

If you do not respond, the scammers may send a “final warning” email. One such email observed by the Guardian had the subject line: “We have tried to contact you several times before, but we have not received any response. If you have not resolved your issue today, all your data will be completely deleted on [date], including your photos and videos.”

A common sign of scams is that the sender’s email address often appears unusual. Perhaps the domain part (after the @ symbol) looks incorrect. Some may reference Ecuador or include “.biz.ua” – which typically relates to Ukrainian business domains – whereas Apple is headquartered in California, with its European base in Ireland.

Another red flag is poor spelling and grammar. For example, one email was titled “Your account may expires today”.

Recommended Actions

Discard or ignore these emails, and avoid clicking on any links provided. If you accidentally click a link, do not share any personal information.

You can report scam emails by forwarding them to report@phishing.gov.uk, and emails pretending to be from iCloud can be sent to reportphishing@apple.com and/or abuse@icloud.com.

When contacted, Apple directed inquiries to a webpage offering advice on how to avoid scams targeting your accounts and devices.

If you inadvertently share your account details, contact your bank immediately upon realizing your error.

It’s quite straightforward to check your iCloud storage manually. On an iPhone, simply go to Settings, then iCloud.

If you need more storage and choose to purchase it, just click the “Upgrade” button, and Apple will process your transaction.