You’ve got mail (fraud).
Consumer organizations are warning the world’s 1.8 billion iPhone users about a sinister email scam designed to pilfer personal info and loot banking details.
According to reports, users receive seemingly legitimate messages informing them that their iCloud storage is full. The messages prompt victims to upgrade their accounts or risk losing important data, namely all their photos.
The messages include a link that supposedly enables the upgrade to a larger plan, and the onerous email is aesthetically similar to Apple communications and is even signed by “The iCloud Team.”
However, reports indicate that clicking the upgrade link or button redirects users to a phishing website designed to steal banking information and personal details.
Those who attempt to make a payment may have their details and data stolen and distributed on the dark web for nefarious purposes.
According to victims of the storage swindle, some messages are more alarming and exploit time sensitivity, telling users that their iCloud account will close within 48 hours unless immediate action is taken.
“Every Apple user needs to know about this nasty scam doing the rounds,” an independent consumer organization shared on Facebook.
“These sneaky fake emails that look like they’re from iCloud and threaten you with claims that ‘all your photos will be deleted,’” the post forewarned.
“I get them nearly every day, and I don’t even have an iPhone,” said one commentator.
“Going digital has made being mugged so much easier for the mugger,” lamented another.
Others pointed out that, to address account issues, Apple typically instructs customers to “go into your settings” and never redirects them to pay via a link.
In response, the US Federal Trade Commission has urged users not to click any links and to contact Apple if they receive such messages.
One potential victim shared an image of their overflowing inbox, specifically an email with the subject line, “Your iCloud storage is full.”
The body of the email reads, “Your iCloud storage is full. You have exceeded your storage plan, and this means that your documents, contacts, and device data are no longer being backed up to iCloud.
Your photos and videos are also not being uploaded to iCloud Photos. iCloud Drive and iCloud-enabled apps are not being updated across your device.”
This escalation suggests the user had ignored earlier emails, and the scammers were now employing a different, more threatening strategy to elicit action.
Experts note that the email address was sent from the account [email protected], noting that similar, albeit legit Apple addresses include [email protected], [email protected], and [email protected].
Last week, Consumer Affairs, a US-based consumer advocacy organization, issued a warning about similarly suspicious messages, including fake “Apple Pay fraud alerts” — and high-pressure phone calls to trick victims into calling the scammers and giving away personal information with the goal of draining their bank accounts.
In one case, a victim reported receiving a text warning about a suspicious Apple Pay charge that urged her to call a number for help. When she did, she was connected to someone posing as an investigator.
She was convinced to withdraw $15,000 from her bank account — but a teller recognized the scam and told her to hang up.
Consumer Affairs warned that if potential victims call an attached phone number or click a provided link, they’ll be connected to someone impersonating Apple Support, a bank, or even law enforcement.
Experts emphasize that if you receive a suspicious message, don’t click any links or call the number. Instead, check with your bank or Apple by contacting them through their official channels, and check Apple Pay activity directly on your device.
If you think you’ve been targeted, stop transactions immediately and notify your bank or card issuer.
