The ‘Cloud Storage Full’ scam steals your photos and money

A new scam is spreading across smartphones and catching thousands of people off guard. Criminals send fake “Cloud Storage Full” or “Photo Deletion” alerts claiming that your pictures and videos are about to disappear unless you upgrade your storage.

The warning seems urgent and real. It even mimics major cloud services. But the moment you click on the link, you walk into a trap.

Sign up to receive my FREE CyberGuy report Get my best tech tips, urgent security alerts, and exclusive offers delivered right to your inbox. Plus, you’ll get instant access to my Ultimate Guide to Surviving Scams, free when you join me CYBERGUY.COM fact sheet

How This Fast-Growing ‘Cloud Storage Full’ Scam Deceives Victims

Researchers at Trend Micro recently discovered this fast-growing phishing campaign after observing a massive increase in activity. The company reports a 531% month-over-month increase from September to October, showing how quickly the plan is spreading.

PROTECT YOUR DATA BEFORE HOLIDAY SHOPPING SCAMS STRIKE

Scammers send personalized SMS and iMessage alerts that include your name and a credible photo or video count. Once you tap on the link, you land on a fake and convincing website that appears to be a cloud storage dashboard. From there, you are encouraged to pay a small update fee of $1.99 to avoid deletion. Instead of protecting anything, you hand over your credit card, PayPal login, or other personal information.

Trend Micro provided several screenshots and internal samples that reveal how polished the scam has become. Fake sites use progress bars, countdown timers, and warnings that your files will be lost. They even mock up a cloud storage design to match the look of popular platforms.

Jon Clay, vice president of threat intelligence at Trend Micro, shared an important warning to CyberGuy:

“The recent rise in ‘Full Cloud Storage’ scams shows how well cybercriminals are perfecting emotional manipulation. These scams prey on fear and urgency, warning users that their photos will be deleted unless they pay a small update fee. During a time of year when we may be capturing many precious moments on camera, scammers are targeting older adults who may think this type of scam message is legitimate and who may be concerned. and anxious about losing something they can’t easily replace. Consumers should always be wary of unsolicited messages and always check for alerts directly through official apps or websites.”

Trend Micro’s analysis describes exactly how the scam works, from the initial message to the final theft. Their screenshots show fake panels, fake warnings, and pages requesting credit card or PayPal details. Some versions even redirect to legitimate sites later to cover their tracks.

How the ‘Cloud Storage Full’ Scam Works

Scammers follow a predictable pattern with this scheme, and each stage reveals a clear red flag that can help you detect danger early.

1) Initial contact

Victims receive an unsolicited SMS or iMessage stating that their photos or videos will be deleted soon. The messages include the person’s name and fake counts such as “1,675 images” or “2,010 snaps” to increase credibility. Scammers add statements like “Act Now” or “Final Warning” to cause panic. Each message ends with a short link that leads to a malicious .info domain.

FAKE CHATGPT APPS ARE HIKING YOUR PHONE WITHOUT YOU KNOWING IT

2) Generation of trust

After tapping on the link, the user lands on a fake “Cloud Storage Full” website. Reflects the fonts, icons, and button styles of actual cloud services. Users see alerts like “Your photos, contacts, and private data will be lost.” Everything seems polished to reduce suspicion.

3) The hook

The site claims its storage is completely full and urges a one-time upgrade for $1.99. A progress bar is 100% full and a countdown timer warns that the data will disappear in minutes. The “Continue” button directs to a fake payment page.

4) The exit

Once victims enter their credit card or PayPal details, scammers collect the data instantly. Attackers can use stolen credentials for unauthorized purchases, credential stuffing, or resale on dark web marketplaces. Some victims receive fake receipt emails to make the charge appear legitimate.

Trend Micro reports that certain scam sites then redirect to real pages like iolo.com to hide their tracks.

Red flags to watch out for

• Urgent warnings that your photos will be deleted
• Unknown links ending in .info
• Messages include your name to appear credible
• Payment requests for small fees like $1.99
• Countdown Timers intended to force quick decisions
• Sites that look familiar but have unusual URLs

Tips to Stay Safe from ‘Cloud Storage Full’ Scams

Scammers rely on fear and urgency to make quick decisions, but some smart habits can stop their tricks before they begin.

1) Check alerts within the official app or website

Open your cloud storage app or go directly to the official website. If you see a real problem, it will appear there. This simple step prevents you from reacting to false warnings.

GHOST SCAM TARGETS TAP-TO-PAY USERS

2) Never touch storage alerts sent via SMS or iMessage and use strong antivirus software.

Break the habit of clicking links in messages. Real cloud services rarely text users about deleting photos. A powerful antivirus tool will flag dangerous links before they are opened.

The best way to protect yourself from malicious links that install malware and potentially access your private information is to have powerful antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best antivirus protection winners of 2025 for your Windows, Mac, Android, and iOS devices at Cyberguy.com

3) Use a data deletion service

Consider using a reputable data removal service to remove your personal data from data broker sites. This step makes it harder for scammers to target you with personalized messages that look real.

While no service can guarantee complete removal of your data from the Internet, a data deletion service is truly a smart choice. They are not cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically deleting your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to delete your personal data from the Internet. By limiting the information available, you reduce the risk of scammers cross-referencing leak data with information they can find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already available on the web by visiting Cyberguy.com

Get a free scan to find out if your personal information is already available on the web: Cyberguy.com

4) Be on the lookout for strange links

Look closely at each link. Scammers rely on short, suspicious-looking domains. Legitimate companies avoid shortened URLs and unknown domains.

5) Use multi-factor authentication

Enable multi-factor authentication (MFA) for all paid and cloud accounts. Adds a powerful layer of protection if criminals steal your login.

6) Check your credit card for small test charges.

Review your statements frequently. Attackers start with small charges to test a card before making larger purchases.

GEEK SQUAD SCAM EMAIL: HOW TO DETECT AND STOP IT

7) Use a password manager

A good password manager helps you create strong and unique passwords. Limits the consequences if your login appears in a data breach.

Next, check to see if your email has been exposed in previous breaches. Our #1 pick for password manager includes a built-in breach scanner that checks to see if your email address or passwords have appeared in known breaches. If you discover a match, immediately change any reused passwords and protect those accounts with new, unique credentials.

Check out the best expert-reviewed password managers of 2025 at Cyberguy.com

8) Report suspicious messages

Forward fraudulent text messages to 7726 (SPAM). This helps operators block similar messages for everyone.

Kurt’s Key Takeaways

This scam spreads because it hits people where they are most vulnerable. Our phones store personal memories, family events, and moments we never want to miss. Scammers know this and now create messages that look real enough to fool even the most cautious users. Emotional triggers like fear and urgency remain powerful tools for cybercriminals. Always question surprise warnings about data loss. If in doubt, check your account directly through the official app or website. A few seconds of verification can save you from credit card theft and identity headaches.

Have you ever received a message like this and how did you handle it? Let us know by writing to us at Cyberguy.com

CLICK HERE TO DOWNLOAD THE News APP

Sign up to receive my FREE CyberGuy report

Get my best tech tips, urgent security alerts, and exclusive offers delivered right to your inbox. Besides , you’ll get instant access to my Ultimate Scam Survival Guide, free when you join my CYBERGUY.COM newsletter.

Copyright 2025 CyberGuy.com. All rights reserved.