Medium riskEmail Scams

Email Storage Full Scam

This scam warns that your mailbox or storage is full and that you will stop receiving messages unless you 'verify' or 'upgrade' through a link. The link leads to a fake webmail login page that captures your email password.

Quick verdict

Risk level
Medium risk
Scam type
Webmail phishing scam
Main red flag
A warning that your mailbox is full and you must click a link to keep receiving email.
What to do first
Do not click the link. Check your storage directly through your email provider's official site or app settings.

What this scam usually looks like

This scam warns that your mailbox or storage is full and that you will stop receiving messages unless you 'verify' or 'upgrade' through a link. The link leads to a fake webmail login page that captures your email password.

Example message pattern

Example pattern — not a real report
Example pattern: 'Your mailbox storage is 99% full. You will not receive new emails until you verify your account. Upgrade storage here: [suspicious link]'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • A storage warning that arrives by email and demands urgent action through a link
  • A link that does not match your real email provider's official domain
  • Threats that incoming messages will be blocked or deleted unless you act now
  • A login page that already shows your email address and only asks for the password
  • Generic greetings and small spelling or formatting errors in an 'official' notice

What to do

  • Check your actual storage through your provider's official website or app settings
  • Type your email provider's address yourself instead of using the link
  • Compare the sender address with previous genuine messages from your provider
  • Report the message as phishing and delete it

If you already clicked or replied

  • Do not enter your password on the page that opened
  • If you already entered it, change your email password straight away
  • Turn on two-step verification and sign out of all other sessions
  • Check your account for forwarding rules or filters you did not create

What not to do

  • Do not enter your email password on a page reached through the link
  • Do not pay any 'storage upgrade' fee requested in the message
  • Do not reply with account details to confirm your identity

Similar scams

High risk Email

Microsoft Account Email Scam

This scam sends a fake Microsoft or Outlook email about an unusual sign-in or an account about to be closed, linking to a fake Microsoft login page that captures your email and password.
Medium risk Email

Dropbox Shared File Scam

This scam sends an email claiming someone shared a Dropbox file or folder with you. The 'View file' link leads to a fake login page designed to capture your email address and Dropbox or work password.
Medium risk Email

Fake Subscription Renewal Email

This scam emails that a subscription is renewing for a large amount, hoping you call a fake support number or click a link to cancel and hand over details.

Frequently asked questions

Do email providers really warn you when storage is full?
Some do, but genuine notices usually appear inside your account or settings, not as an urgent email demanding you log in through an outside link.
Why does the fake page already know my email address?
Scammers often pre-fill your address from the list they are targeting so the page looks personal. Only the password field is blank, which is exactly what they want you to fill in.
I entered my password. What now?
Change it immediately from the official site, enable two-step verification, and check for unfamiliar forwarding rules. Your inbox can be a gateway to many other accounts.
How can I report an email storage scam?
Mark it as phishing in your email client, report it to your provider's abuse address, and warn your IT team if it arrived on a work account.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.