Advanced Phishing Scam Exploits ‘Cloud Storage Full’ Alerts to Steal Personal Data and Credit Card Info

A new phishing scam is targeting users with fake ‘Cloud Storage Full’ alerts via SMS and iMessage. These deceptive messages mimic legitimate cloud services and claim users’ photos and videos will be deleted unless they upgrade their storage. Once users click on the provided link, they are directed to a convincing fake website that appears to be a cloud storage dashboard.

The site prompts users to pay $1.99 to avoid data loss, but in reality, it’s a trap designed to steal credit card, PayPal, and other personal information. Trend Micro researchers recently uncovered this fast-growing phishing campaign after seeing a massive jump in activity, with a 531% month-over-month spike from September to October.

Scammers are sending personalized SMS and iMessage alerts that include the user’s name and a believable count of photos or videos. Once users tap the link, they land on a fake website that appears to be a cloud storage dashboard. From there, users are urged to pay a tiny $1.99 upgrade fee to prevent deletion, but instead, they hand over their credit card, PayPal login, or other personal information.

Trend Micro provided several screenshots and internal samples that reveal how polished the scam has become. The fake sites use progress bars, countdown timers, and warnings that files will be lost. They even simulate a cloud storage layout to match the look of popular platforms.

Jon Clay, VP of threat intelligence at Trend Micro, warned: “The recent spike in ‘Cloud Storage Full’ scams shows how well cybercriminals are perfecting emotional manipulation. These scams prey on fear and urgency, warning users their photos will be deleted unless they pay a small upgrade fee. During a time when we may be capturing many precious moments on camera, scammers are targeting older adults who may think this type of scam message is legitimate and who may be worried and anxious about losing something that cannot easily replace. Consumers should always stay cautious of unsolicited messages and always verify alerts directly through official apps or websites.”

Trend Micro’s analysis outlines exactly how the scam works, from the initial message to the final theft. Their screenshots show fake dashboards, false warnings, and pages asking for credit card or PayPal details. Some versions even redirect to legitimate sites later to cover their tracks.

Victims receive an unsolicited SMS or iMessage that claims their photos or videos will be deleted soon. Messages include the person’s first name and fake counts like ‘1,675 images’ or ‘2,010 snaps’ to boost credibility. Scammers add statements like ‘Act now’ or ‘Final warning’ to trigger panic. Each message ends with a short link that leads to a malicious .info domain.

After tapping the link, the user arrives at a fake ‘Cloud Storage Full’ website. It mirrors the fonts, icons, and button styles of real cloud services. Users see alerts such as ‘Your photos, contacts, and private data will be lost.’ Everything looks polished to reduce suspicion.

The site claims your storage is completely full and urges a one-time upgrade for $1.99. A progress bar sits at 100% full and a countdown timer warns that data will vanish in minutes. The ‘Continue’ button goes to a fake payment page.

Once victims enter credit card or PayPal details, scammers harvest the data instantly. Attackers may use stolen credentials for unauthorized purchases, credential stuffing, or resale on dark web markets. Some victims receive fake receipt emails to make the charge look legitimate.

Trend Micro reports that certain scam sites later redirect to real pages like iolo.com to hide their tracks.

Scammers rely on fear and urgency to push quick decisions, but a few smart habits can shut down their tricks before they start.

Open your cloud storage app or go to the official website directly. If you see a real problem, it will appear there. This simple step prevents you from reacting to fake warnings.

Break the habit of tapping links in messages. Real cloud services rarely text users about photo deletion. A strong antivirus tool will flag dangerous links before they open.

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Consider using a reputable data removal service to scrub your personal details from data broker sites. This step makes it harder for scammers to target you with personalized messages that look real.

While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Look closely at every link. Scammers rely on short domains that look real enough to fool even the most cautious users. Emotional triggers like fear and urgency remain powerful tools for cybercriminals. Always question surprise warnings about data loss. When in doubt, check your account directly through the official app or website. A few seconds of verification can save you from credit card theft and identity headaches.

Have you ever received a message like this, and how did you handle it? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

Copyright 2025 CyberGuy.com. All rights reserved.