A New Smartphone Scam Regarding Storage Alerts
A recent scam is spreading across smartphones, catching many users off guard. Scammers are sending fake alerts that claim your “cloud storage is full” or that “photos have been deleted,” urging you to upgrade to avoid losing your pictures and videos. These messages look urgent and mimic well-known cloud services. However, clicking the link leads to trouble.
Understanding the Cloud Storage Full Scam
Researchers from Trend Micro have noticed an alarming increase in this phishing tactic, observing a staggering 531% rise in reports from September to October alone. This indicates just how quickly this scheme is gaining traction.
Scammers send personalized SMS and iMessages that include the victim’s name along with an inflated number of supposedly affected photos or videos. Upon clicking the link, users are directed to a convincing counterfeit website resembling a cloud storage dashboard. Here, they are prompted to pay a minor fee of $1.99 to avoid deletion, leading them to share sensitive credit card or PayPal information in return for security.
Trend Micro has shared several screenshots that showcase the sophistication of this scam. These fraudulent websites use elements like progress bars, countdown clocks, and alerts about potential data loss, making everything seem legitimate. They even simulate the look of popular cloud services to appear trustworthy.
Jon Clay, a vice president at Trend Micro, emphasized the emotional manipulation at play with this scam: “These scams leverage fear and urgency, often targeting older adults who might believe the messages are genuine and panic about losing irreplaceable data. It’s crucial for consumers to remain vigilant about unsolicited communications and always verify claims through official channels.”
How the Cloud Storage Full Scam Operates
The scammers follow a recognizable sequence, making it easier to spot potential risks.
1) Initial Contact
Victims receive unexpected SMS or iMessages claiming their photos and videos will soon be deleted. These messages often include the recipient’s first name and a fictitious number of images to create a sense of urgency, with phrases like “act now” or “last warning.” Each message includes a shortened link that directs to a malicious .info domain.
2) Building Trust
Clicking the link brings users to a fake “Cloud Storage Full” site that mimics the design of the actual service, complete with logos and similar text. Users see alarming messages like “Your photos and personal information are at risk,” which are designed to reduce skepticism.
3) Hook
The site claims that storage is completely full and offers a quick upgrade for $1.99. Users encounter a progress bar indicating 100% capacity and a countdown timer warning of imminent data loss, pushing them to click “Continue” and reach a bogus payment portal.
4) Exit
When victims enter their payment details, scammers immediately capture this sensitive information. They may use stolen credentials for unauthorized purchases or sell the data on the dark web. Victims sometimes even receive fake receipts to make the transaction seem credible.
Identifying Red Flags
- Urgent alert about imminent photo deletion
- Suspicious link ending with .info
- Personalized message addressing you by name
- Request for a small upgrade fee such as $1.99
- Countdown timer driving hasty decisions
- Website that feels familiar but has a different URL
Protecting Yourself from These Scams
Scammers thrive on fear to provoke quick reactions. However, adopting a few smart practices can help prevent falling victim to such schemes.
1) Verify Alerts through Official Channels
Always check your cloud service app or website directly. If something is genuinely wrong, it’ll be evident there, allowing you to avoid reacting to fraudulent messages.
2) Avoid Tapping on SMS Storage Alerts
Be cautious about clicking links in messages. Reputable cloud services rarely send alerts via text regarding photo deletions. Strong antivirus software can also flag dangerous links for you.
3) Consider Data Removal Services
Utilizing trustworthy data deletion services can limit the amount of personal information available online, making it harder for scammers to target you with convincing messages.
4) Scrutinize All Links
Pay close attention to any links. Scammers often use suspicious short domains, as established businesses typically avoid them.
5) Enable Multi-Factor Authentication
Adding multi-factor authentication (MFA) to your cloud and payment accounts provides an additional layer of security in case of a breach.
6) Monitor Your Credit Card Statements
Frequently review your account statements for unexpected small charges. Scammers sometimes initiate small transactions to test credit cards before larger purchases.
7) Use a Password Manager
A good password manager helps create strong, unique passwords, minimizing the risk if your credentials are involved in a breach.
8) Report Suspicious Messages
Forward any scam texts to 7726 to help telecommunications providers block similar messages in the future.
Final Thoughts
This scam is successful mainly because it exploits people’s vulnerabilities. Our smartphones hold valuable memories and moments we desperately want to keep safe. Scammers are aware of this and craft deceptive messages that seem credible enough to catch even the most cautious users off guard. If you receive an alarming message about data loss, exercise skepticism and verify from trusted sources. A quick check can save you from identity theft and financial loss.
Have you encountered similar messages? What action did you take? Reach out to share your experiences.
