“iCloud storage is full” scam is back, and now it wants your payment details
None
<p>The post <a href="https://www.malwarebytes.com/blog/news/2026/04/icloud-storage-is-full-scam-is-back-and-now-it-wants-your-payment-details">“iCloud storage is full” scam is back, and now it wants your payment details</a> appeared first on <a href="https://www.malwarebytes.com/">Malwarebytes</a>.</p><p>A few months ago, we reported on a <a href="https://www.malwarebytes.com/blog/news/2026/02/a-fake-cloud-storage-alert-that-ends-at-freecash">fake cloud storage alert that triggered a redirect chain</a> to an app that has since been <a href="https://techcrunch.com/2026/04/14/how-the-rewards-app-freecash-scammed-its-way-to-the-top-of-the-app-stores/" rel="noreferrer noopener nofollow">delisted from the Apple Store</a>.</p><p>The threat of losing your photos is a powerful lure, so scammers are now using it to steal personal and financial details.</p><p>The <a href="https://www.theguardian.com/money/2026/apr/12/apple-icloud-storage-scam-emails#:~:text=There%2520are%2520lots%2520of%2520variations,https://www.theguardian.com/money/2026/apr/12/apple-icloud-storage-scam-emails" rel="noreferrer noopener nofollow">Guardian</a> warns about an iCloud-themed campaign that start with a few “your iCloud storage is full’ messages, then escalates to threats. If you don’t respond or take action, the emails claim your data will be wiped on a specific date.</p><p>US <a href="https://www.consumeraffairs.com/news/iphone-users-are-being-targeted-with-a-new-phishing-scam-041526.html" rel="noreferrer noopener nofollow">Consumer Affairs</a> has urged users not to click any links and to contact Apple directly if they receive such messages.</p><p>The deadline in the emails is never far away, usually just two days. No scammer ever wants you to think things through before you act, so there is always time pressure.</p><hr class="wp-block-separator has-text-color has-cyan-bluish-gray-color has-alpha-channel-opacity has-cyan-bluish-gray-background-color has-background is-style-wide" style="margin-top:var(--wp--preset--spacing--20);margin-bottom:var(--wp--preset--spacing--20)"><div class="wp-block-columns is-layout-flex wp-container-core-columns-is-layout-28f84493 wp-block-columns-is-layout-flex"> <div class="wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow" style="flex-basis:10%"></div> <div class="wp-block-column is-layout-flow wp-container-core-column-is-layout-10073889 wp-block-column-is-layout-flow" style="padding-top:var(--wp--preset--spacing--30);padding-bottom:var(--wp--preset--spacing--30);flex-basis:70%"> <h2 class="wp-block-heading has-dark-blue-color has-text-color has-link-color wp-elements-2df367df4b7eeeeac786a0b3dfec10e1" id="h-scam-or-legit-scam-guard-knows"><strong>Scam or legit? Scam Guard knows</strong>.</h2> </div> <div class="wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow" style="flex-basis:20%"> <div class="wp-block-malware-bytes-button mb-button" id="mb-button-2c88a240-3457-4d23-8d74-29d332e8eda0"> <div class="mb-button__row"> <div class="mb-button__item mb-button-item-0"> <p class="btn-main"><a href="https://www.malwarebytes.com/solutions/scam-guard" rel="noreferrer noopener">TRY IT FREE</a></p> </div> </div> </div> </div> </div><hr class="wp-block-separator aligncenter has-text-color has-cyan-bluish-gray-color has-alpha-channel-opacity has-cyan-bluish-gray-background-color has-background is-style-wide" style="margin-top:var(--wp--preset--spacing--20);margin-bottom:var(--wp--preset--spacing--20)"><p>We’ve seen these emails in English and Spanish. Oddly, the monthly rate is set at 99 pence or 99 euro cents respectively.</p><p>The 0.99 seems to be the magic number. In reality, scammers don’t care about the payment. What they want is for you fill out the form on their phishing site.</p><figure class="wp-block-image aligncenter size-full"><img decoding="async" loading="lazy" width="446" height="274" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2026/04/email_screenshot.png" alt="Email saying you must upgrade to iCloud+ or lose your photos" class="wp-image-400382"><figcaption class="wp-element-caption">Email saying you must upgrade to iCloud+ or lose your photos</figcaption></figure><p>The screenshot above is just one of many examples. There are plenty of variations, but they all follow the same them: make a small payment to stop the files in your iCloud storage from being deleted.</p><p>The websites these emails link to also vary, but they all ask for personal and payment details to complete that payment.</p><h2 class="wp-block-heading" id="h-how-to-stay-safe">How to stay safe</h2><p>It’s worth remembering that Apple does notify users when their iCloud storage is nearing capacity, but those alerts appear within your device settings or as official system notifications. They don’t come through unsolicited text messages or emails with external links. If you need to check your storage, go directly to <strong>Settings</strong> on your device and review your iCloud usage.</p><p>So, to stay safe:</p><ul class="wp-block-list"> <li>Always access your account through our official website.</li> <li>Never share your password with anyone.</li> <li>Never click on links in unsolicited emails without verifying with a trusted source.</li> <li>Use an up-to-date, real-time <a href="https://www.malwarebytes.com/home-page" rel="noreferrer noopener">anti-malware solution</a> with a web protection component.</li> <li>Do not engage with websites that attract visitors like this.</li> </ul><p>Pro tip: <a href="https://www.malwarebytes.com/solutions/scam-guard" rel="noreferrer noopener">Malwarebytes Scam Guard</a> would have helped you identify this email as a scam and provided advice on how to proceed.</p><hr class="wp-block-separator has-alpha-channel-opacity is-style-wide"><p><strong>We don’t just report on scams—we help detect them</strong></p><p>Cybersecurity risks should never spread beyond a headline. If something looks dodgy to you, check if it’s a scam using <a href="https://www.malwarebytes.com/solutions/scam-guard">Malwarebytes Scam Guard</a>. Submit a screenshot, paste suspicious content, or share a link, text or phone number, and we’ll tell you if it’s a scam or legit. Available with <a href="https://www.malwarebytes.com/premium" rel="noreferrer noopener">Malwarebytes Premium Security</a> for all your devices, and in the <a href="https://www.malwarebytes.com/mobile">Malwarebytes app for iOS and Android</a>.</p><div class="spu-placeholder" style="display:none"></div><div class="addtoany_share_save_container addtoany_content addtoany_content_bottom"><div class="a2a_kit a2a_kit_size_20 addtoany_list" data-a2a-url="https://securityboulevard.com/2026/04/icloud-storage-is-full-scam-is-back-and-now-it-wants-your-payment-details/" data-a2a-title="“iCloud storage is full” scam is back, and now it wants your payment details"><a class="a2a_button_twitter" href="https://www.addtoany.com/add_to/twitter?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F04%2Ficloud-storage-is-full-scam-is-back-and-now-it-wants-your-payment-details%2F&linkname=%E2%80%9CiCloud%20storage%20is%20full%E2%80%9D%20scam%20is%20back%2C%20and%20now%20it%20wants%20your%20payment%20details" title="Twitter" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_linkedin" href="https://www.addtoany.com/add_to/linkedin?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F04%2Ficloud-storage-is-full-scam-is-back-and-now-it-wants-your-payment-details%2F&linkname=%E2%80%9CiCloud%20storage%20is%20full%E2%80%9D%20scam%20is%20back%2C%20and%20now%20it%20wants%20your%20payment%20details" title="LinkedIn" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_facebook" href="https://www.addtoany.com/add_to/facebook?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F04%2Ficloud-storage-is-full-scam-is-back-and-now-it-wants-your-payment-details%2F&linkname=%E2%80%9CiCloud%20storage%20is%20full%E2%80%9D%20scam%20is%20back%2C%20and%20now%20it%20wants%20your%20payment%20details" title="Facebook" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_reddit" href="https://www.addtoany.com/add_to/reddit?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F04%2Ficloud-storage-is-full-scam-is-back-and-now-it-wants-your-payment-details%2F&linkname=%E2%80%9CiCloud%20storage%20is%20full%E2%80%9D%20scam%20is%20back%2C%20and%20now%20it%20wants%20your%20payment%20details" title="Reddit" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_email" href="https://www.addtoany.com/add_to/email?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F04%2Ficloud-storage-is-full-scam-is-back-and-now-it-wants-your-payment-details%2F&linkname=%E2%80%9CiCloud%20storage%20is%20full%E2%80%9D%20scam%20is%20back%2C%20and%20now%20it%20wants%20your%20payment%20details" title="Email" rel="nofollow noopener" target="_blank"></a><a class="a2a_dd addtoany_share_save addtoany_share" href="https://www.addtoany.com/share"></a></div></div><p class="syndicated-attribution">*** This is a Security Bloggers Network syndicated blog from <a href="https://www.malwarebytes.com/">Malwarebytes</a> authored by <a href="https://securityboulevard.com/author/0/" title="Read other posts by Malwarebytes">Malwarebytes</a>. Read the original post at: <a href="https://www.malwarebytes.com/blog/news/2026/04/icloud-storage-is-full-scam-is-back-and-now-it-wants-your-payment-details">https://www.malwarebytes.com/blog/news/2026/04/icloud-storage-is-full-scam-is-back-and-now-it-wants-your-payment-details</a> </p>