Medium riskEmail Scams

iCloud Storage Scam

An iCloud storage scam arrives as an email or text pretending to be from Apple, warning that your storage is full or a payment for extra storage has failed. It claims your photos, files, or backups will be deleted unless you update your details through a link. That link leads to a fake Apple sign-in page built to capture your Apple Account email, password, and sometimes payment details.

Quick verdict

Risk level
Medium risk
Scam type
Account impersonation scam
Main red flag
A message claiming your iCloud is full or payment failed and your photos will be deleted, pushing you to a sign-in or payment link.
What to do first
Do not tap the link. Check your storage directly in Settings on your iPhone, iPad, or Mac, or by signing in at the official Apple site you type yourself.

What this scam usually looks like

An iCloud storage scam arrives as an email or text pretending to be from Apple, warning that your storage is full or a payment for extra storage has failed. It claims your photos, files, or backups will be deleted unless you update your details through a link. That link leads to a fake Apple sign-in page built to capture your Apple Account email, password, and sometimes payment details.

Example message pattern

Example pattern — not a real report
Example pattern: "Apple: Your iCloud storage is full. Your photos and documents will be deleted within 48 hours. Verify your account and upgrade now to avoid losing your data: [unfamiliar link]"

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • Threats that your photos, files, or backups will be deleted within a short deadline unless you act now.
  • A link to "verify", "upgrade", or "update payment" rather than directions to check storage in your device settings.
  • The web address behind the link does not match Apple's official domain.
  • Greeting that does not use your name, or odd spacing, spelling, or formatting in the message.
  • A text or email requesting your Apple Account password or full payment card details directly.

What to do

  • Check your actual storage on your device: open Settings, tap your name, then iCloud to see usage and any genuine prompts.
  • If you want to sign in to Apple, type the official address yourself rather than following a link from the message.
  • Treat unexpected "payment failed" claims with caution and verify billing through your device or App Store account.
  • Report the message as junk or phishing and delete it once you have confirmed it is not genuine.

If you already clicked or replied

  • If you entered your Apple Account password, change it immediately from a device you trust.
  • Make sure two-factor authentication is switched on for your Apple Account and review the list of trusted devices.
  • Check your Apple Account for any sign-in or purchase activity you do not recognise.
  • If you entered card details, contact your bank or card provider to flag the card and discuss next steps.

What not to do

  • Do not enter your Apple Account password on a page reached from an email or text link.
  • Do not rush because of a deletion deadline; genuine storage limits do not erase data on the timelines these messages claim.
  • Do not share two-factor codes or payment details with anyone who contacts you out of the blue.

Similar scams

Frequently asked questions

Does Apple really delete my photos if iCloud storage is full?
When storage runs out, new backups and uploads may stop, but existing data is not wiped on a 24 or 48 hour countdown like these messages claim. The urgent deletion deadline is a pressure tactic, so it is wise to check your storage in Settings rather than trusting the message.
How can I check my iCloud storage safely?
On an iPhone or iPad, open Settings, tap your name, then iCloud to see your usage and any real prompts. On a Mac you can check through System Settings. Going through your device avoids any link in a suspicious email or text.
The email looked exactly like Apple's branding. Could it still be fake?
Yes. Logos, colours, and layout are easy to copy, so appearance alone does not confirm an email is genuine. Focus instead on whether it pressures you with a deadline and pushes you to a link, and verify through your device settings.
I signed in on the linked page. What should I do now?
Change your Apple Account password straight away from a trusted device, confirm two-factor authentication is on, and review your trusted devices and recent activity. If you also entered card details, contact your bank to flag the card.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.