iCloud is an online cloud storage and sync service offered to customers of Apple, primarily used for Apple users to store multimedia, email and calendar features.
About iCloud scam texts, emails and phone calls
iCloud scams are primarily instigated through text or email and may take on a number of different social engineering techniques.
Some popular examples of iCloud phishing scams including –
- Claiming a recipient has been locked out of the iCloud account for their account has been disabled.
- Claiming a recipient needs to confirm their details or be locked out of their iCloud account.
- Claiming the recipient has reached their iCloud storage limit and needs to upgrade.
The below example sent via SMS claims the recipient’s iCloud account will be deactivated unless they click a link.
Your iCloud ID has been deactivated. To reactivate your account confirm your details here. LINK – Apple
The below example sent via SMS claims the recipient’s iCloud account has been suspended for security reasons and implores the recipient to click a link.
Your iCloud ID has been temporarily suspended due to unauthorized login attempts. Unlock your iCloud ID – Link
The below phishing scam sent via email claims the recipient’s iCloud account has reached its storage limit and asks the recipient to click a link to get more storage space.
ATTENTION NEEDED:
You have reached your iCloud storage limit
Get an additional 50GB FREE
Your iCloud storage is full!
Get an additional 50GB FREE when you click below.
RECEIVE 50GB
Don’t lose your data – Get your free storage today!
Report an iCloud phone, text and email scam.
How to report an iCloud scam text?
Apple state that you can screenshot the offending text and forward it to them at reportphishing@apple.com.
How to report an iCloud scam email?
Apple state that you can report scam emails by forwarding them to reportphishing@apple.com . You can also forward suspicious emails that mention iCloud to abuse@icloud.com.
If you're in the UK, you can ALSO report scams...
- Scam emails can be forwarded to The National Cyber Security Centre (NCSC) at report@phishing.gov.uk
- Scam texts can be forwarded to your phone carrier on 7726
- All types of cybercrime and fraud can be reported to the police via ActionFraud by calling 0300 123 2040 (or 101 in Scotland) or by using ActionFraud's online reporting tool here.
If you're in the USA, you can ALSO report scams...
- Scam texts can be forwarded to your phone carrier on 7726
- All types of cybercrime and fraud can be reported to the Federal Trade Commission (FTC) by using their complaint assistant here or by calling 1-877-382-4357 (9am-8pm ET)
From a different country? Click here.
You can also forward SMS or email scams to us at scam@thatsfake.com
Avoiding iCloud phone, text and email scams
iCloud themed scams are common and listing all the types of scams here would be impossible. However, practising good security habits will protect you from the vast majority of these types of scams.
This includes –
- Never clicking links on unexpected emails or messages purportedly sent from Apple or iCloud.
- Never handing over personal information to someone calling you claiming to be from iCloud.
- Never opening email attachments on unexpected emails purporting to come from iCloud.
- Beware of unexpected messages or emails that contain poor grammar or spelling mistakes.
- Be aware of common social engineering tricks such as the claim your account has been suspended or locked, or that you’ve won a prize.
Apple has a web page dedicated for providing information about Apple-themed scams on their website here.