A warning has been issued to the world’s 1.8 billion iPhone users about a new email scam designed to steal banking details and personal information.
Victims report receiving messages claiming their iCloud storage is full, urging them to upgrade their accounts immediately to avoid losing photos, videos and access to certain apps.
The emails include a button to enable the upgrade, but The Guardian reported that this takes users to a malicious website designed to steal sensitive information.
If users provide their bank details or make a payment, scammers can use the information to steal additional funds or sell the data to other criminals on the dark web.
Some emails posted by victims appeared more threatening, warning them that their iCloud account would be closed within 48 hours if they did not act immediately.
‘Every Apple user needs to know about this nasty scam doing the rounds,’ Which?, the UK’s largest independent consumer organization, shared on Facebook.
‘These sneaky fake emails that look like they’re from iCloud and threaten you with claims that ‘all your photos will be deleted.’
The US Federal Trade Commission has also issued a warning about the scam, warning users to contact Apple if they receive one of these emails rather than clicking any links that are likely to take users to fraudulent websites.
One victim shared their experience on Reddit, showing their inbox packed with emails with the subject ‘Your iCloud storage is full’ and text saying: ‘Your iCloud storage is full. You have exceeded your storage plan, and this means that your documents, contacts and device data are no longer being backed up to iCloud.
‘Your photos and videos are also not being uploaded to iCloud Photos. iCloud Drive and iCloud-enabled apps are not being updated across your device.’
The message also includes a button to upgrade to a larger iCloud plan and, to make it appear even more official, it is signed by ‘The iCloud Team.’
One glaring red flag in this message is the email address, as it was sent from ‘noreply@email.apple.com.’
Common legitimate addresses from the tech giant include no_reply@email.apple.com, noreply@apple.com and noreply@insideicloud.icloud.com.
The Guardian received an email from one victim that stated: “We have tried to contact you several times before, but we have not received any response.
‘If you have not resolved your issue today, all your data will be completely deleted on [date], including your photos and videos.”
This suggested that the user had ignored the emails, yet scammers gave it another attempt with a more threatening tone.
ConsumerAffairs, a US-based consumer advocacy organization, uncovered another scam attempting to steal money from iPhone users.
Last week, the organization alerted them about fake ‘Apple Pay fraud alerts’ being sent via text messages to victims, claiming there is a problem with their account, such as a purchase was attempted or declined, prompting immediate action.
If victims call the number or click the link, they are connected to scammers posing as Apple Support, banks or even law enforcement officials.
The fraudsters often claim the victim’s money is in immediate danger and may use stolen personal details to make the threat seem believable.
Victims are then pressured to act quickly, often told to move money to a so-called ‘safe’ account, withdraw cash or send funds through Apple Pay, Apple Cash or gift cards.
ConsumerAffairs, a consumer advocacy organization, released details about the scam on Wednesday, saying there are several warning signs consumers should watch for, including unexpected messages about Apple Pay activity, requests to call a phone number included in a text or email, and pressure to act quickly.
Requests for passwords, security codes or instructions to move money, especially if someone tells you to lie to your bank, are also major red flags.
Apple has repeatedly said that it does not send unsolicited texts asking customers to call support or provide sensitive information. If you receive a suspicious message, experts advise not clicking links or calling numbers provided in the message.
