Scams going around · Emails
iCloud storage full email scam
Pretends to be Apple iCloud (or Microsoft or Google). An email or text that seems to come from Apple, Microsoft or Google says you are out of cloud storage. Cloud storage is online space for your photos and files. The message gives you a link to upgrade. The scammers want to steal your personal information or put malware, which is harmful software, on your device.
An example of what it can look like
Not a real message: the details are made up.
iCloud Support <storage-alert@cloud-billing-notice.example>
Your iCloud storage is full. Your photos and videos are no longer being backed up. Upgrade your plan within 24 hours to keep your files: icloud-storage-upgrade.example/renew
How to tell
- You don't store photos or files online with the company that sent the message. The FTC says that is the best clue it is a scam. Apple gives every iCloud account some free storage, so if you use iCloud, check for yourself.
- The sender's email address doesn't match the name of the company it claims to be from.
- It wants you to tap a link to upgrade, and the web address in the link doesn't match the company's website.
- The message, or a page it sends you to, asks for your password, a security code or a credit card number. Apple says it will never contact you to ask for your password or your two-factor code, the extra code you use to sign in.
What to do
- Don't tap the link or open any file attached to the message.
- If you don't store photos or files online with that company, report the message and delete it.
- If you do, check your storage yourself, not through the message. On an iPhone or iPad, open Settings, tap your name, then tap iCloud.
- Never type a password or security code into a page that a message sent you to.
If you already tapped, paid, called or replied
- Typed a password into the page? Go to the company's website or app yourself, not through the message, and change that password right away. Then turn on two-factor authentication, the extra code step when you sign in, for that account.
- Used that same password on other accounts? Change it there too.
- Gave a credit card or debit card number? Call your card company or bank right away. Use the number on the back of your card.
- Think the link put harmful software on your phone or computer? Update your security software, the program that looks for harmful software. Then run a scan, which is a check of your device, and delete anything it finds.
- Don't have security software, or need help? Ask the company that made your device, or a friend or family member who knows about computers.
How to check for real
To see how much iCloud storage you are using, open Settings on your iPhone or iPad, tap your name, then tap iCloud. You can also type iCloud.com into your web browser yourself. For Microsoft or Google, sign in to your account the way you usually do. Or use a phone number or website you know is real.
Where to report it
- If it claims to be from Apple, forward the email to reportphishing@apple.com. For a text, email a screenshot of it to the same address.
- Forward the email to the Anti-Phishing Working Group at reportphishing@apwg.org.
- Forward a scam text to 7726 (SPAM).
- Report it to the FTC at ReportFraud.ftc.gov.
Free guides that go with this
Check a message you got, free · Check a link
Where this comes from
Written from these official warnings, checked 2026-09-25. Lantern is not part of any organization named on this page.