How to spot scam iCloud emails that lead to dark web hack

Experts at Which? are warning users to keep a lookout for the fake emails informing users that either their storage is full, payment method is outdated or “suspicious account activity” has been detected.

iCloud is Apple’s cloud storage service, which allows Apple's customers to store photos, files, passwords and other data.

A Which? article states: “Scammers are impersonating Apple and iCloud to send dodgy emails claiming that your iCloud storage is full or nearly full to rush you into taking quick action to extend your storage capacity. 

“In examples Which? saw, fraudsters added pressure by claiming that you’re ‘at risk of losing your photos, videos and important files', and that you must ‘upgrade today to keep your precious files and memories safe'.

“One email claimed to offer an 80% discount to 'upgrade now'.”

Which? say that all of these emails led to dodgy phishing websites that gather personal details, such as your name, email address and phone number and financial details, including your bank information.

“This information can go on to be sold on the dark web or used to craft a more convincing scam to target you with,” the article states.

How to spot and report scam emails

Some of the common features of a scam email, according to Which?, include:

• An unofficial sender address

• An impersonal greeting

• Blurred and unofficial branding

• Being pressured or rushed to take an action, especially if you're being asked to follow a link to do so

Recommended reading:

• WhatsApp to stop working on iPhones soon - devices affected

• O2 offering more than £1000 for old mobiles and other devices - how to claim

• Nearly 9 million PlayStation owners could be owed more than £500 - are you one?

• Requests for personal and financial information

• Poor spelling and grammar

Scam emails can be reported by forwarding them to report@phishing.gov.uk and emails impersonating iCloud can be sent to abuse@icloud.com.

Malicious websites can be reported to the National Cyber Security Centre.