Medium riskEmail

Email Storage Full Scam

This scam warns that your mailbox or storage is full and that you will stop receiving messages unless you 'verify' or 'upgrade' through a link. The link leads to a fake webmail login page that captures your email password.

Quick verdict

Risk level
Medium risk
Scam type
Webmail phishing scam
Main red flag
A warning that your mailbox is full and you must click a link to keep receiving email.
What to do first
Do not click the link. Check your storage directly through your email provider's official site or app settings.

What to know first

This scam warns that your mailbox or storage is full and that you will stop receiving messages unless you 'verify' or 'upgrade' through a link. The link leads to a fake webmail login page that captures your email password.

Email scams, or phishing, remain one of the most common ways criminals steal logins, payment details, and money. A convincing message imitates a brand or contact and steers you toward a fake login page, a malicious attachment, or a fraudulent payment.

The core pattern to watch for is clear: A warning that your mailbox is full and you must click a link to keep receiving email. Do not click the link. Check your storage directly through your email provider's official site or app settings.

Related tricks worth knowing: the Microsoft Account Email Scam and the Dropbox Shared File Scam. For the wider picture, browse the Email Scams guides or run the message through our scam checker.

Scam statistics

Most reported
phishing was the most common type of cybercrime complaint reported to the FBI in 2023
$12.5B
total reported internet-crime losses in the US in 2023

Tell-tale red flags

  • A storage warning that arrives by email and demands urgent action through a link
  • A link that does not match your real email provider's official domain
  • Threats that incoming messages will be blocked or deleted unless you act now
  • A login page that already shows your email address and only asks for the password
  • Generic greetings and small spelling or formatting errors in an 'official' notice

Staying safe

  • Check your actual storage through your provider's official website or app settings
  • Type your email provider's address yourself instead of using the link
  • Compare the sender address with previous genuine messages from your provider
  • Report the message as phishing and delete it

How it usually reads

Example pattern, not a real report
Example pattern: 'Your mailbox storage is 99% full. You will not receive new emails until you verify your account. Upgrade storage here: [suspicious link]'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

What to notice: A warning that your mailbox is full and you must click a link to keep receiving email.

Steps if you already acted

  • Do not enter your password on the page that opened
  • If you already entered it, change your email password straight away
  • Turn on two-step verification and sign out of all other sessions
  • Check your account for forwarding rules or filters you did not create

Common mistakes

  • Do not enter your email password on a page reached through the link
  • Do not pay any 'storage upgrade' fee requested in the message
  • Do not reply with account details to confirm your identity

Scams like this one

Your questions answered

Do email providers really warn you when storage is full?
Some do, but genuine notices usually appear inside your account or settings, not as an urgent email demanding you log in through an outside link.
Why does the fake page already know my email address?
Scammers often pre-fill your address from the list they are targeting so the page looks personal. Only the password field is blank, which is exactly what they want you to fill in.
I entered my password. What now?
Change it immediately from the official site, enable two-step verification, and check for unfamiliar forwarding rules. Your inbox can be a gateway to many other accounts.
How can I report an email storage scam?
Mark it as phishing in your email client, report it to your provider's abuse address, and warn your IT team if it arrived on a work account.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.