Apple users are currently being targeted by a sophisticated phishing campaign designed to steal both iCloud credentials and credit card information. The scam begins with an urgent email or text message claiming that your iCloud storage is full or that your subscription has expired. To create a sense of panic, the message often warns that your photos, contacts, and phone backups will be permanently deleted within 24 hours unless you “validate” your account.

If you click the link provided, you are taken to a counterfeit website that looks identical to the official Apple login page. Once you enter your Apple ID and password, the site prompts you to provide “updated” billing information, including your credit card number and CVV. Because many people use their Apple ID to manage everything from their find-my-phone features to their saved passwords (Keychain), handing over these credentials gives a hacker total control over your digital life and your wallet.