{“lastseen”:”2026-04-16T14:06:37″,”description”:”A few months ago, we reported on a fake cloud storage alert that triggered a redirect chain to an app that has since been delisted from the Apple Store.\\n\\nThe threat of losing your photos is a powerful lure, so scammers are now using it to steal personal and financial details.\\n\\nThe Guardian warns about an iCloud-themed campaign that start with a few \u201cyour iCloud storage is full\u2019 messages, then escalates to threats. If you don’t respond or take action, the emails claim your data will be wiped on a specific date.\\n\\nUS Consumer Affairs has urged users not to click any links and to contact Apple directly if they receive such messages.\\n\\nThe deadline in the emails is never far away, usually just two days. No scammer ever wants you to think things through before you act, so there is always time pressure.\\n\\n* * *\\n\\n## **Scam or legit? Scam Guard knows**.\\n\\nTRY IT FREE\\n\\n* * *\\n\\nWe’ve seen these emails in English and Spanish. Oddly, the monthly rate is set at 99 pence or 99 euro cents respectively.\\n\\nThe 0.99 seems to be the magic number. In reality, scammers don\u2019t care about the payment. What they want is for you fill out the form on their phishing site.\\n\\nEmail saying you must upgrade to iCloud+ or lose your photos\\n\\nThe screenshot above is just one of many examples. There are plenty of variations, but they all follow the same them: make a small payment to stop the files in your iCloud storage from being deleted.\\n\\nThe websites these emails link to also vary, but they all ask for personal and payment details to complete that payment.\\n\\n## How to stay safe\\n\\nIt\u2019s worth remembering that Apple does notify users when their iCloud storage is nearing capacity, but those alerts appear within your device settings or as official system notifications. They don’t come through unsolicited text messages or emails with external links. If you need to check your storage, go directly to **Settings** on your device and review your iCloud usage.\\n\\nSo, to stay safe:\\n\\n * Always access your account through our official website.\\n * Never share your password with anyone.\\n * Never click on links in unsolicited emails without verifying with a trusted source.\\n * Use an up-to-date, real-time anti-malware solution with a web protection component.\\n * Do not engage with websites that attract visitors like this.\\n\\n\\n\\nPro tip: Malwarebytes Scam Guard would have helped you identify this email as a scam and provided advice on how to proceed.\\n\\n* * *\\n\\n**We don ‘t just report on scams\u2014we help detect them**\\n\\nCybersecurity risks should never spread beyond a headline. If something looks dodgy to you, check if it’s a scam using Malwarebytes Scam Guard. Submit a screenshot, paste suspicious content, or share a link, text or phone number, and we\u2019ll tell you if it’s a scam or legit. Available with Malwarebytes Premium Security for all your devices, and in the Malwarebytes app for iOS and Android.”,”published”:”2026-04-16T12:33:11″,”modified”:”2026-04-16T12:33:11″,”type”:”malwarebytes”,”title”:”\u201ciCloud storage is full\u201d scam is back, and now it wants your payment details”,”source”:””,”references”:””,”id”:”MALWAREBYTES:8AD1D6C035318C111A05F6D917CCE20E”,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.malwarebytes.com\/blog\/news\/2026\/04\/icloud-storage-is-full-scam-is-back-and-now-it-wants-your-payment-details”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-04-16T14:06:37″,”description”:”A few months ago, we reported on a fake cloud storage alert that triggered a redirect chain to an app that has since been delisted…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,115,13,33,7,11,5],"class_list":["post-47455","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-malwarebytes","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n