Fraudsters are sending convincing emails that appear to be from Apple, warning that users’ iCloud storage is full and that their photos could be deleted, in an attempt to trick people into handing over personal and banking details.
The warnings, described in a report by the Guardian, mimic genuine Apple notifications about iCloud storage limits but direct recipients to fake websites where they are prompted to enter Apple ID credentials and payment information.
How the iCloud storage scam works
According to the Guardian’s account, the scam typically begins with an email that looks like a routine storage alert from Apple. The message claims that the user’s iCloud storage is full or nearly full, and that new photos and documents are no longer being backed up.
Some messages reportedly go further, suggesting that photos could be deleted if the user does not act. The email then urges the recipient to click a link to “manage storage” or “upgrade your plan.”
Instead of sending users to Apple’s official website or the Settings app on their device, these links lead to imitation login pages designed to capture:
- Apple ID usernames and passwords
- Personal details, such as names and addresses
- Payment card information
The Guardian report notes that once scammers have these details, they can attempt to access the victim’s Apple account, as well as use the captured payment data for fraudulent transactions or sell it on to other criminals.
Why the scam is convincing
The emails described in the Guardian report exploit a common experience for many Apple users: repeated alerts that iCloud storage is nearly full. Genuine messages from Apple about storage limits are routine, especially for people on the free 5GB tier.
Scammers appear to be taking advantage of this familiarity by copying the style and language of legitimate Apple communications. The Guardian notes that the messages include:
- Branding and layout that resemble official Apple emails
- Wording about storage limits and backups that mirrors genuine alerts
- Prominent warnings about the risk to photos and documents
Because many users already feel pressure to upgrade storage, the added threat that “your photos will be deleted” can create a sense of urgency that makes people more likely to click without checking the details closely.
What is at risk for users
The Guardian’s reporting indicates that the main goal of the scam is to harvest sensitive data. If a user follows the link and enters information on the fake site, they risk:
- Losing control of their Apple ID: With a stolen password, criminals may try to access iCloud backups, messages, and other data linked to the account.
- Financial fraud: Payment card details entered on the fake upgrade page can be used for unauthorized charges.
- Wider identity theft: Personal information collected through the scam can be combined with data from other breaches to open accounts or attempt further scams.
The report emphasizes that the danger is not limited to the loss of photos themselves, but to the broader access that Apple ID and financial details can provide once they are in criminal hands.
How to spot and handle suspicious iCloud emails
Based on the Guardian’s description of the scam, several warning signs can help users distinguish fraudulent messages from genuine Apple communications:
- Unexpected links: Apple encourages users to manage iCloud storage through device settings or the official iCloud website, not through third‑party links in emails.
- Generic greetings: Scam emails may use non‑personalized greetings or awkward language that differs from Apple’s usual style.
- Pressure tactics: Strong threats that photos will be deleted immediately if you do not click a link are a common scam technique.
The Guardian report suggests that users who receive such an email should avoid clicking any embedded links. Instead, they can:
- Open the Settings app on an iPhone, iPad or Mac and check iCloud storage directly.
- Log in by manually typing the official Apple website address into a browser.
- Delete any email that looks suspicious, or report it through Apple’s recommended channels.
If someone believes they may have entered details on a fake site, the Guardian account indicates that immediate steps should include changing the Apple ID password and contacting their bank or card provider to monitor for fraudulent activity.
Why this warning matters
Although the Guardian report focuses on a specific iCloud storage scam, it highlights a broader risk: criminals are increasingly tailoring messages to match the routine alerts that technology companies send to users.
Because storage warnings are common and often ignored until they become urgent, scammers can exploit that moment of urgency to push people toward fake upgrade pages. The report underlines that even experienced users who are used to Apple’s ecosystem can be caught out if they rely only on the look of an email rather than checking where a link actually leads.
For now, the available reporting centers on this particular pattern of storage‑related scam emails targeting Apple users. As more information emerges, users are likely to hear further guidance from consumer protection bodies and technology companies on how to recognize and report similar attempts.
The immediate takeaway from the Guardian’s coverage is straightforward: anyone receiving an email claiming their iCloud storage is full, especially one threatening that “your photos will be deleted,” should treat it with caution and manage their account only through Apple’s official apps or website.
