Cloud Storage Email Scam Message - How to Protect Yourself

Common Scam Tactics

• Urgency & Fear: Scammers use alarming subject lines like "Immediate Action Required" or "Your photos and videos will be removed today" to pressure you into acting without thinking.
• Fake Login Portals: Clicking a link in the email often leads to a "dummy" login page that looks identical to Google Drive, iCloud, or Dropbox to steal your username and password.
• Generic Branding: Many scam emails use generic terms like "Cloud Storage" or "Email Service Provider" instead of a specific company name.
• Tiny Payment Requests: They may offer a "loyalty upgrade" for a very small fee (e.g., $1.99) just to capture your full credit card details.

Red Flags

• Suspicious Sender Address: On a desktop, hover over the sender's name to see the real email address. It often comes from a random domain (e.g., @rambler.ru) rather than official domains like @apple.com or @google.com.
• Generic Greetings: Legitimate services usually address you by your full name, whereas scammers use "Dear User" or "Dear Customer".
• Deceptive Links: Hover over buttons (without clicking) to preview the destination URL. If it doesn't match the service's official website, it's a scam.

How to Protect Yourself

1. Verify Directly: Never click links in a storage alert email. Instead, log in directly through the official app or type the website (e.g., google.com or icloud.com) into your browser.
2. Enable Two-Factor Authentication (2FA): This adds a critical layer of security; even if a scammer steals your password, they cannot access your account without the second code.
3. Report the Phishing Attempt:
   • Apple: Forward suspicious iCloud emails to abuse@icloud.com or reportphishing@apple.com.
   • FTC: Report scams to the Federal Trade Commission.
   • General: Forward phishing emails to the Anti-Phishing Working Group.