NEWNow you can listen to Fox News articles!
A new scam is spreading on smartphones and catching thousands of people by surprise. Criminals are sending fake news”Cloud storage is full” or “deleting photos,” which claim that your pictures and videos are about to disappear unless you update your storage. The warning appears relevant and real. It even mimics major cloud services. But as soon as you click on the link, you will fall into a trap.
Subscribe to my FREE CyberGuy ReportGet my best tech tips, breaking security alerts, and exclusive offers straight to your inbox. Plus, you'll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter
How This Fast-Growing Cloud Storage Full Scam Is Deceiving Victims
Trend Micro researchers recently discovered this fast-growing phishing campaign after seeing a huge spike in activity. The company reported a 531% month-on-month increase from September to October, showing how quickly the scheme is spreading.
PROTECT YOUR DATA BEFORE HOLIDAY SHOPPING SCAM.
Scammers use convincing vault alerts and fake dashboards to trick victims into paying small fees that reveal their credit card information. (Pixelfit/Getty Images)
Fraudsters send personalized alerts via SMS and iMessage that include your name and a plausible number of photos or videos. Clicking on the link takes you to a very convincing fake website that looks like a cloud storage control panel. You will then be asked to pay a small update fee of $1.99 to prevent removal. Instead of securing anything, you hand over your credit card, PayPal login, or other personal information.
Trend Micro provided several screenshots and internal samples that show how sophisticated the scam has become. Fake sites use progress bars, countdown timers, and warnings that your files will be lost. They even model the structure of cloud storage to match the look and feel of popular platforms.
John Clay, VP of Threat Intelligence at Trend Micro, shared an important warning for CyberGuy:
“The recent surge in Cloud Storage Full scams shows how well cybercriminals have perfected emotional manipulation. These scammers prey on fear and urgency by warning users that their photos will be deleted unless they pay a small update fee. At a time of year when we can capture many precious moments on camera, scammers are targeting seniors who may think this type of scam message is legitimate and who may be anxious and worried about losing something that cannot be easily replaced. Consumers should always be wary of unwanted messages and always check alerts directly through official apps or websites.”
Trend Micro's analysis shows exactly how the scam works, from the initial report to the final theft. Their screenshots show fake dashboards, false alerts, and query pages. credit card or PayPal details. Some versions even later redirect to legitimate sites to cover their tracks.
How the Cloud Storage Full Scam Works
In this scheme, scammers follow a predictable pattern, and at each stage there is a clear red flag that can help you spot the danger early on.
1) Initial contact
Victims receive an unwanted SMS or iMessage claiming that their photos or videos will be deleted soon. The messages include the person's name and the number of fakes, such as “1,675 images” or “2,010 shots” to increase credibility. Scammers add statements such as “Act Now” or “Final Warning” to create panic. Each message ends with a short link leading to a malicious .info domain.
FAKE CHATGPT APPLICATIONS HARM YOUR PHONE WITHOUT YOUR KNOWING
2) Building trust
Clicking on the link takes the user to a fake Cloud Storage Full website. It replicates the fonts, icons, and button styles of real cloud services. Users see alerts such as “Your photos, contacts and personal data will be lost.” Everything looks perfect to reduce suspicion.
3) Hook
The site claims your storage is full and calls for a one-time upgrade for $1.99. The progress bar is 100 percent full, and a countdown timer warns that the data will disappear in a few minutes. The “Continue” button goes to the fake payment page.
4) Exit
Once victims enter their credit card or PayPal information, scammers collect data immediately. Attackers can use stolen credentials to make unauthorized purchases, credential stuffing, or resell on darknet markets. Some victims receive fake receipt emails to make the charges appear legitimate.
Trend Micro reports that some scam sites later redirect to genuine pages, such as iolo.com, to cover their tracks.
Fraudsters use fake dashboards and alerts to trick victims into sharing payment information. (Kurt “CyberGuy” Knutsson)
Red flags to watch out for
- Urgent warnings that your photos will be deleted
- Unfamiliar links ends with .info
- Messages that include your name to inspire confidence
- Payment requests for a small fee, such as $1.99.
- Countdown timers designed for making quick decisions
- Websites that look familiar but have unusual URLs
Tips to protect yourself from scams with Cloud Storage Full
Scammers rely on fear and urgency to make quick decisions, but a few smart habits can stop their tricks before they even begin.
1) Check the alerts on the official app or website.
Open the cloud storage app or go directly to the official website. If you see a real problem, it will appear there. This simple step will prevent you from responding to false alerts.
GHOST SCAM AIMED AT TAP-TO-PAY USERS
2) Never listen to storage alerts sent via SMS or iMessage and use strong antivirus software.
Break the habit of clicking links in messages. Real cloud services rarely write to users about deleting photos. A powerful antivirus flags dangerous links before they are opened.
The best way to protect yourself from malicious links that install malware and potentially access your personal information is to install powerful antivirus software on all your devices. This protection can also alert you to phishing emails and ransomware, keeping your personal information and digital assets safe.
Get my picks for 2025's top antivirus protection winners for your Windows, Mac, Android, and iOS devices at Cyberguy.com
3) Use the data deletion service
Consider using a reliable data removal service to remove your personal data from data broker sites. This move makes it harder for scammers to target you with personalized messages that look real.
While no service can guarantee complete removal of your data from the internet, a data removal service is indeed a smart choice. They don't come cheap, and neither does your privacy. These services do all the work for you, actively monitoring and systematically removing your personal information from hundreds of websites. This is what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk that scammers will link leaked data to information they can find on the dark web, making it harder for them to target you.
Check out my top data removal services and get a free scan to see if your personal information has already been published online by visiting Cyberguy.com
Get a free scan to see if your personal information is already posted online: Cyberguy.com
4) Watch out for strange links
Look carefully at each link. Fraudsters rely on short domains that look suspicious. Legitimate companies avoid shortened URLs and unknown domains.
5) Use multi-factor authentication.
Include multi-factor authentication (MFA) for all cloud and payment accounts. This adds a powerful layer of protection if criminals steal your login.
6) Check your credit card for small testing fees.
Review your statements often. Attackers start with small payments to test the card before making larger purchases.
FRAUDULENT LETTER FROM GEEK SQUAD: HOW TO DETECT IT AND STOP IT
7) Use a password manager
A good password manager will help you create strong and unique passwords. This limits the consequences if your login appears in data leak.
Next, check if you have email has been compromised in past violations. Our #1 password manager includes a built-in breach scanner that checks to see if your email address or passwords have appeared in known breaches. If you find a match, immediately change any reused passwords and secure those accounts with new, unique credentials.
These false storage warnings mimic real cloud services and trick users into upgrading to a $1.99 upgrade. As soon as you enter your payment information, scammers will instantly steal it. (Uchar/Getty Images)
Check out the best password managers of 2025, reviewed by experts, at Cyberguy.com.
8) Report suspicious messages
Forward fraudulent messages to number 7726 (SPAM). This helps telecom operators block the same messages for everyone.
Kurt's key takeaways
This scam is spreading because it hits people where they are most vulnerable. Our phones store personal memories, family events and moments that we never want to lose. Scammers know this and are now creating messages that look real enough to fool even the most wary of users. Emotional triggers such as fear and urgency remain powerful tools for cybercriminals. Always question unexpected data loss warnings. If in doubt, check your account directly through the official app or website. A few seconds of verification can save you from credit card theft and identity headaches.
Have you ever received a message like this and how did you deal with it? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Subscribe to my FREE CyberGuy Report
Get my best tech tips, breaking security alerts, and exclusive offers straight to your inbox. Plus, you'll get instant access to my ultimate scam survival guide—for free when you sign up for my CYBERGUY.COM newsletter.
Copyright CyberGuy.com 2025. All rights reserved.
