iCloud Storage Email Scam - How to Protect Yourself

How the Scam Works

Fraudsters send realistic-looking HTML emails featuring official Apple branding. They rely on urgency and panic—threatening that your data, photos, and videos will be permanently wiped out within 48 hours if you do not upgrade.

The emails typically include an "Upgrade Now" or "Update Payment" link. Instead of directing to Apple, these links take you to a credential-harvesting phishing website. If you input your details, scammers can steal your Apple ID, password, and credit card information, or even deploy malware onto your device.

Red Flags to Watch For

• Urgent Deadlines: Apple will never threaten to instantly wipe your data within a couple of days.
• Suspicious Sender Address: While the sender name might say "iCloud," checking the actual email address reveals strange, non-Apple domains.
• Requests for Payment Details to Prevent Deletion: Phishing pages often ask for credit card numbers or banking information directly through the link to process a nominal fee (like 99p/99c).
• External Links: Official Apple storage warnings usually direct you to your device’s system settings rather than external, unverified websites.

How to Protect Yourself

1. Do Not Click Links: If you receive an unexpected email about your storage, do not click any links, open attachments, or reply.
2. Verify via Settings: Always check your actual account status safely by going directly to the Settings app on your iPhone/Mac or logging into Apple iCloud or Apple ID directly from your browser.
3. Report the Scam: Forward the malicious email to Apple's official phishing review team at reportphishing@apple.com. After forwarding, delete the email from your inbox and trash folders.
4. Contact Your Bank: If you accidentally entered your card details on a suspected page, contact your financial institution immediately to freeze your accounts and prevent fraud.