Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Cloud Computing Services Scam - How to Protect Yourself

Cloud computing service scams are phishing campaigns where criminals impersonate major providers like Google Drive, Microsoft OneDrive, or Apple iCloud. They trick users into revealing login credentials or financial information by falsely claiming cloud storage is full, expiring, or has been compromised.

Common Cloud Scams

  • "Storage Full" Alerts: Scammers send fake emails/texts claiming your cloud storage is full. You are pressured to click an urgent link to "upgrade" or "secure" your files.
  • Fake Login Portals: Links in these messages lead to counterfeit web pages designed to steal your username, password, or credit card details when you attempt to log in.
  • "Lifetime" Cloud Deals: Fraudsters sell heavily discounted "lifetime unlimited" cloud storage through shady websites to steal payment information and personal files.
  • Cloud Mining Schemes: Promising massive, impossible returns on investments in crypto/hash processing power. It is essentially a Ponzi scheme with no actual data center infrastructure.
  • Business Vendor Lock-in: Some industry critics debate whether enterprise cloud computing feels like a "scam" due to soaring hidden data egress costs and forced long-term dependence on a single vendor.

How to Protect Yourself

  • Never click unsolicited links: If you receive a storage alert, do not click the link in the message. Instead, navigate directly to your cloud provider's official website (e.g., Google Drive or OneDrive).
  • Check the Sender Address: Carefully inspect the sender's email address. Phishers often spoof official brand names but use slightly altered domains.
  • Enable 2FA: Always use two-step verification on your accounts so even if your password is stolen, your account remains secure.

If You've Been Targeted

  • Verify before acting: To understand if a message is legitimate, review guidance directly on the Federal Trade Commission Advice page.
  • Report the fraud: Forward phishing emails to the Anti-Phishing Working Group at reportphishing@apwg.org or to the FTC Complaint Assistant.
waiting