# iCloud storage full scam emails: how to spot them and what to do

URL: https://iblockspam.com/blog/icloud-storage-full-scam-emails
Last updated: 2026-10-16
Published: 2026-10-16
Topic: Phishing & threats
Author: iBlockSpam Team

> How iCloud storage full scam emails work, what really happens when iCloud is full, how to check storage in Settings, and what to do if someone paid or clicked.

## Short answer

An iCloud storage full scam email claims your storage is full and your photos or files will be deleted unless you upgrade or update payment through a link. It leads to a fake Apple page that steals your Apple Account password and card details. Don't click. Check storage yourself in Settings, then your name, then iCloud.

"Your iCloud storage is full. Your photos and videos will be deleted in 48 hours. Upgrade now for free." Almost everyone with an iPhone has seen a version of this email, and it keeps working because iCloud storage really does fill up. This guide shows how the scam works, what really happens when iCloud is full, how to check in ten seconds, and what to do if someone already entered a password or card number.

## What is an iCloud storage full scam email?

An iCloud storage full scam email is a phishing message that pretends to come from Apple or iCloud and claims your storage is full, your account is suspended or your payment failed. It threatens that your photos, files or backups will be lost unless you click a link to upgrade, "claim free storage" or update your payment details. The link leads to a fake Apple page that collects your Apple Account password, card details or both.

The [FTC warned about this in July 2025](https://consumer.ftc.gov/consumer-alerts/2025/07/are-you-really-out-cloud-storage-or-message-scam). It describes emails and texts that look like they're from Apple, Microsoft or Google, saying you're out of cloud storage and pushing you to upgrade through a link. Its key clue: if you don't have a storage account with that company, the message is phishing.

### Common versions of the lure

| Lure | What it says | What it wants |
|---|---|---|
| Storage full | "Your iCloud storage is full. Photos will be deleted." | Apple Account password |
| Payment failed | "We couldn't renew your iCloud+ plan. Update your payment method." | Card number and security code |
| Free upgrade or loyalty reward | "As a loyal customer you get 50 GB free." | Card details for a "small fee" |
| Account locked | "Your Apple Account has been locked for security reasons." | Password and verification code |
| Final notice | "Last chance before your files are removed." | Any of the above |

The same pattern exists for Microsoft and Google accounts, and for work mailboxes. Our guide to [mailbox full and account suspended phishing](https://iblockspam.com/blog/mailbox-full-account-suspended-phishing) covers the Microsoft 365 and Google Workspace versions.

### Example of an iCloud storage full scam email

This is an **example** written for this guide. It is not a real Apple email.

```
From: iCloud Support <billing@icloud-storage-notice.net>
Subject: Action required: Your iCloud storage is full (ID 88219)

Dear Customer,

Your iCloud storage is full. Your payment method has expired
and we were unable to renew your plan.

Your photos, videos and files will be permanently removed
on 18 October 2026 unless you update your information.

As a valued customer you can receive 50 GB of extra storage
free of charge.

[ Update payment and keep my files ]

Apple Inc. All rights reserved.
```

Red flags: a sender domain that isn't Apple's, "Dear Customer" instead of your name, a deletion date, a "free" upgrade that still needs card details, and a button instead of an instruction to check your device.

## What really happens when iCloud storage is full?

When iCloud storage is full, backups, uploads and syncing stop. Apple's [iCloud storage page](https://support.apple.com/en-us/108922) describes what stops working, not a countdown to deletion like the one scam emails threaten. It says that if you run out of space:

- "your device won't back up to iCloud"
- "new photos and videos won't upload to iCloud Photos"
- "iCloud Drive and other iCloud apps won't stay up to date across your devices"
- "you won't be able to send or receive emails with your iCloud email address"

Apple also says "When you set up iCloud, you automatically get 5 GB of storage for free", so a free account filling up is common, which is what makes the lie believable.

One real side effect is worth knowing. Apple says that if you exceed your storage limit, "your device immediately removes any photos and videos you delete and they won't be available for recovery in your Recently Deleted album." So be careful what you delete to free space, but that is not the same as Apple deleting your library.

| Claim in the scam email | What Apple's support page says |
|---|---|
| "Your photos will be deleted" | New photos stop uploading to iCloud Photos |
| "Your account will be suspended" | Backups and syncing stop until you free space or upgrade |
| "Upgrade through this link" | Upgrades are made from Settings on your device |
| "Enter your card to receive free storage" | No such offer is described; free storage is the 5 GB you get at setup |

## How do I check if my iCloud storage is really full?

Check on your device. It takes ten seconds and settles the question.

1. **On iPhone or iPad:** open **Settings**, tap your name, then tap **iCloud**. Tap **Storage** or **Manage Account Storage** to see how much space you use ([Apple Support](https://support.apple.com/en-us/108922)).
2. **On a Mac:** choose **Apple menu** > **System Settings**, click your name, then click **iCloud**.
3. **Compare with the email.** If you have space, the email is fake. If you have no iCloud account, the FTC calls that "the best clue" that the message is phishing.
4. **If you really are full**, delete what you don't need or upgrade from the device. Apple's [upgrade instructions](https://support.apple.com/en-us/108349) start in Settings under your name, and the exact menu names vary by iOS version at the time of writing (October 2026).

Never upgrade from an email link. Apple's [phishing guidance](https://support.apple.com/en-us/102568) says "Apple will never ask you to log in to any website, or to tap Accept in the two-factor authentication dialog", and "never share your Apple Account password or verification codes with anyone."

## How do I tell a fake Apple email from a real one?

Apple's [phishing page](https://support.apple.com/en-us/102568) lists the signs. Among them:

- "The sender's email or phone doesn't match the name of the company that it claims to be from."
- "A link in a message looks right, but the URL doesn't match the company's website."
- "The message requests personal information, like a credit card number or account password."
- "The message is unsolicited and contains an attachment."

Apple's page doesn't publish a list of sender addresses for iCloud notices, so don't treat a familiar-looking address as proof. The device check above is the reliable test. If you want to see who really sent the message, paste its headers into the [Email Header Analyzer](https://iblockspam.com/tools/email-header-analyzer). To check a link without opening it, see [how to check if a link is safe](https://iblockspam.com/blog/how-to-check-if-a-link-is-safe).

CISA adds that polished grammar no longer means a message is genuine, so don't rely on spotting typos ([CISA](https://www.cisa.gov/secure-our-world/recognize-and-report-phishing)). For the general checklist, see [how to spot a phishing email](https://iblockspam.com/blog/how-to-spot-a-phishing-email).

## Why should a business care about iCloud scams?

These emails look like a personal problem, but they land in work inboxes and hit work devices.

- **They reach work addresses.** Scammers send to huge lists, and many people registered their Apple Account with a work email.
- **Company iPhones sync business data.** Photos of whiteboards, notes, contacts and backups can all sit in iCloud. A stolen Apple Account password can expose them.
- **Password reuse.** If the Apple password matches a work password, the scam becomes a work account compromise. Our guide to [mobile email security and BYOD](https://iblockspam.com/blog/mobile-email-security-byod) covers the wider risk of personal accounts on work devices.
- **Card theft.** Staff who enter a company card to "renew storage" hand it to criminals.

The FTC lists the same pattern across all phishing: messages that "claim there's a problem with your account or your payment information" ([FTC](https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams)).

## What should I do if I clicked an iCloud scam link?

If you only opened the page and typed nothing, close it. If you entered anything, act now.

1. **Change your Apple Account password** from Settings on your device, not from the email. Change it anywhere else you used it.
2. **Check two-factor authentication** is on, and review the devices signed in to your Apple Account. Remove any you don't recognize.
3. **If you entered a card**, call the bank using the number on the card and ask them to cancel it.
4. **If it was a work device or the password is used at work**, tell IT straight away so they can reset the work account and check for forwarding rules.
5. **Report the email.** Forward it to `reportphishing@apple.com` ([Apple Support](https://support.apple.com/en-us/102568)). The FTC also suggests `reportphishing@apwg.org` and [ReportFraud.ftc.gov](https://reportfraud.ftc.gov/). At work, use the report button in your mail app; see [how to report a phishing email](https://iblockspam.com/blog/report-phishing-email).

The full checklist is in [what to do after clicking a phishing link](https://iblockspam.com/blog/what-to-do-after-clicking-phishing-link).

## How can a business reduce iCloud scam emails?

1. **Teach the device check.** One rule covers iCloud, Google and Microsoft storage scams: check storage in the app or settings, never from an email.
2. **Ban card entry from email links.** Company cards should never be typed into a page an email opened.
3. **Discourage work email addresses on personal Apple Accounts**, and personal Apple Accounts on company devices where you can.
4. **Make reporting easy**, so one report lets IT remove every copy.
5. **Filter before delivery.** Microsoft 365 and Google Workspace catch many of these emails, and for some businesses that is enough. If they keep arriving, an MX-level filter checks inbound mail for spam, phishing and spoofing before it reaches users, with a quarantine each person can review. iBlockSpam is priced per domain with unlimited mailboxes; see [pricing](https://iblockspam.com/pricing).

## Next steps

1. Tell staff: if an email says storage is full, check Settings, then your name, then iCloud, and never pay from a link.
2. Make sure everyone uses a unique Apple Account password with two-factor authentication.
3. Add `reportphishing@apple.com` to your internal reporting instructions alongside your own report button.
4. Check your own domain with the free [Email Health Check](https://iblockspam.com/tools/email-health-check), and if scam emails keep reaching your team, look at [iBlockSpam pricing](https://iblockspam.com/pricing) for per-domain filtering.

Browse our other [phishing and threat guides](https://iblockspam.com/blog/topic/threats).

## Frequently asked questions

### Is the 'your iCloud storage is full' email a scam?

Often, yes. The FTC warned in July 2025 about emails and texts that look like Apple, Microsoft or Google saying you're out of cloud storage. Real iCloud storage use is always visible on your device. Open Settings, tap your name, then iCloud, and look. If you have plenty of space, or no iCloud account at all, the email is phishing.

### Will Apple delete my photos if iCloud storage is full?

Apple's support page describes what stops when iCloud runs out of space: your device won't back up to iCloud, new photos and videos won't upload to iCloud Photos, iCloud Drive won't stay up to date and iCloud Mail can't send or receive. It sets no deletion deadline like the ones scam emails threaten. One catch: while you're over the limit, photos you delete skip Recently Deleted and can't be recovered.

### How do I upgrade iCloud storage safely?

Upgrade from the device itself, not from an email. Apple's instructions start in Settings on your iPhone or iPad, under your name, and the exact menu names depend on your iOS version. Because the upgrade happens inside Settings, you never need to type card details into a web page that an email opened.

### Where do I report a fake Apple or iCloud email?

Forward it to reportphishing@apple.com, as Apple's support page asks. The FTC also suggests forwarding phishing emails to the Anti-Phishing Working Group at reportphishing@apwg.org and reporting at ReportFraud.ftc.gov. If it arrived at a work address, use your mail app's report button too, so IT can remove other copies.

### Why do iCloud scams reach work email addresses?

Scammers send to huge lists, and many people use an iPhone for work or tie their Apple Account to a work address. A stolen Apple Account password can expose synced photos, notes, contacts and backups that include business data. If the same password is reused at work, the scam becomes a business account compromise.

## Sources

- [FTC Consumer Alert: Are you really out of Cloud storage or is that message a scam? (July 2025)](https://consumer.ftc.gov/consumer-alerts/2025/07/are-you-really-out-cloud-storage-or-message-scam)
- [Apple Support: Recognize and avoid phishing messages, phony support calls, and other scams](https://support.apple.com/en-us/102568)
- [Apple Support: Manage your iCloud storage on your Apple device](https://support.apple.com/en-us/108922)
- [Apple Support: Buy iCloud+ or upgrade your current storage plan](https://support.apple.com/en-us/108349)
- [FTC: How to recognize and avoid phishing scams](https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams)
- [CISA: Recognize and report phishing](https://www.cisa.gov/secure-our-world/recognize-and-report-phishing)

## Free tools for this guide

- [Email Header Analyzer](https://iblockspam.com/tools/email-header-analyzer): Trace hops and authentication results — runs entirely in your browser.
- [Email Health Check](https://iblockspam.com/tools/email-health-check): Grade your domain's MX, SPF, DKIM, DMARC and transport security in one scan.

---

Source: iBlockSpam, https://iblockspam.com/blog/icloud-storage-full-scam-emails (this is a Markdown copy; the HTML page is canonical). Quote with attribution and a link. Site index for AI assistants: https://iblockspam.com/llms.txt