Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Cloud Storage Email Scam Message - How to Protect Yourself
Cloud Storage Email Scam Message - How to Protect Yourself

Cloud storage email scams falsely warn that your iCloud, Google Drive, or OneDrive storage is full, expired, or locked to steal login credentials and payment information. These phishing attempts use urgent language to trick you into clicking malicious links that lead to fake login portals. Never click links in these emails; instead, check your account status directly via the official app or website.

Common Scam Tactics

  • Urgency & Fear: Scammers use alarming subject lines like "Immediate Action Required" or "Your photos and videos will be removed today" to pressure you into acting without thinking.
  • Fake Login Portals: Clicking a link in the email often leads to a "dummy" login page that looks identical to Google Drive, iCloud, or Dropbox to steal your username and password.
  • Generic Branding: Many scam emails use generic terms like "Cloud Storage" or "Email Service Provider" instead of a specific company name.
  • Tiny Payment Requests: They may offer a "loyalty upgrade" for a very small fee (e.g., $1.99) just to capture your full credit card details.

Red Flags

  • Suspicious Sender Address: On a desktop, hover over the sender's name to see the real email address. It often comes from a random domain (e.g., @rambler.ru) rather than official domains like @apple.com or @google.com.
  • Generic Greetings: Legitimate services usually address you by your full name, whereas scammers use "Dear User" or "Dear Customer".
  • Deceptive Links: Hover over buttons (without clicking) to preview the destination URL. If it doesn't match the service's official website, it's a scam.

How to Protect Yourself

  1. Verify Directly: Never click links in a storage alert email. Instead, log in directly through the official app or type the website (e.g., google.com or icloud.com) into your browser.
  2. Enable Two-Factor Authentication (2FA): This adds a critical layer of security; even if a scammer steals your password, they cannot access your account without the second code.
  3. Report the Phishing Attempt:
    • Apple: Forward suspicious iCloud emails to abuse@icloud.com or reportphishing@apple.com.
    • FTC: Report scams to the Federal Trade Commission.
    • General: Forward phishing emails to the Anti-Phishing Working Group.
waiting