iCloud Storage Full Scam: How to Spot and Avoid the Latest Phishing Attack Apple users are facing a resurgence of a deceptive phishing campaign that exploits fears about iCloud storage limits to steal personal and financial information. Cybersecurity experts warn that fake “iCloud storage is full” alerts are circulating again, designed to trick users into revealing sensitive data through fraudulent links. How the Scam Works The scam typically begins with an unsolicited email or text message claiming that your iCloud storage has reached its limit. These messages often state that if you do not take immediate action—such as upgrading your storage plan—your photos, documents, and backups will be deleted within a short timeframe, usually two days. This urgency is intended to pressure recipients into acting quickly without verifying the legitimacy of the alert. According to Malwarebytes, the messages frequently include a link that directs users to a phishing website designed to mimic Apple’s official login page. Once there, victims are prompted to enter their Apple ID credentials and payment details under the guise of purchasing additional iCloud+ storage. Notably, the fraudulent sites often list a monthly fee of 99 pence or 99 euro cents—a detail that has appeared consistently across multiple variants of the scam. It is key to emphasize that Apple does not send iCloud storage warnings via email or text message with external links. Legitimate notifications about storage capacity appear only within the device’s Settings app or as official system notifications on iPhone, iPad, or Mac. How to Protect Yourself To avoid falling victim to this scam, users should follow several key precautions: – Never click on links in unexpected emails or texts claiming to be from Apple about iCloud storage. – If you receive such a message, delete it immediately and do not provide any personal information. – To check your actual iCloud storage usage, go directly to Settings on your device, tap your name, then select iCloud to view a detailed breakdown. – If you are unsure about the legitimacy of a message, contact Apple Support through official channels rather than responding to the suspicious communication. – Enable two-factor authentication on your Apple ID for an added layer of security. Cybersecurity authorities, including US Consumer Affairs, have reiterated that Apple will never request for your password, payment information, or verification codes via unsolicited messages. Any request for such details should be treated as a potential scam. What to Do If You’ve Been Targeted If you believe you have entered your information on a fraudulent site, take immediate action: – Change your Apple ID password right away. – Review your account activity for any unauthorized changes or purchases. – Contact your bank or payment provider if you shared financial details. – Report the phishing attempt to Apple at reportphishing@apple.com and to relevant consumer protection agencies. Staying informed and cautious remains the best defense against evolving phishing tactics. By recognizing the signs of fraudulent iCloud alerts and knowing how to verify storage status through official means, users can safeguard their data and avoid falling prey to these increasingly sophisticated scams.
34