Fraudsters are going to new lengths to trick users: now with fake “action required” messages from Apple, claiming that your iCloud storage is full, and your photos and videos will soon be deleted or no longer saved.

The scam email, reported by the Guardian, includes a click button where you can seemingly upgrade your storage.

The malicious link leads to a phishing website, meant to harvest your personal and financial data. If the victim enters their bank details or makes a payment, their information will be captured, allowing criminals to potentially steal more money or resell the data on the dark web.

“Every Apple user needs to know about this nasty scam doing the rounds,” says the UK consumer body Which? on Facebook, warning of the fraud.

“These sneaky fake emails that look like they’re from iCloud and threaten you with claims that 'all your photos will be deleted',” it adds.

The email can appear legitimate because it can come at a roughly similar time as genuine Apple notifications about iCloud storage limits.

The Guardian says that there are many variations of the scam. In one instance, they saw an email that was titled “iCloud Storage Alert”, with the subject line: “We’ve blocked your account! Your photos and videos will be deleted on [date].”

In another instance, an email said: “Your payment method has expired!… Your cloud service has been disabled.”

The Cybernews community is talking about this. Be a part of the conversation.

Other emails can be less concerning, saying something like: “Payment failed for your Cloud storage renewal”.

In all cases, the Guardian adds, there is a button encouraging a user to update their payment method or manage their storage.

Those who ignore the email may receive a “final warning” follow-up. In one example seen by the publication, a subject line said: “We have tried to contact you several times before, but we have not received any response. If you have not resolved your issue today, all your data will be completely deleted on [date], including your photos and videos.”

Most importantly, there are signs that can give scammers away. The email address of the sender often looks suspicious: the domain might look wrong (for example, some mention Ecuador or have “.biz.ua” in the domain). The email might also contain spelling or grammar mistakes (like “Your account may expires today” observed in one email).

If you receive such an email, don’t click on any links and report them as spam or move them straight to trash. It’s always advisable to check iCloud storage directly through Apple’s official website or device settings. Emails impersonating iCloud can be sent to [email protected] and/or [email protected].

Unlock more exclusive Cybernews content on YouTube.