Explainer / Published 2026-11-05

Apple will scan public iCloud links, and account bans are not excluded

Apple says iOS 27.3, iPadOS 27.3, macOS 27.3 and visionOS 27.3 will begin checking content shared through public Anyone with the link iCloud links for harmful material. The document does not define harmful content or describe the checks, but it does say Apple may block or disable an Apple Account and involve law enforcement.

(See the reader poll and source context below).

Apple's new support document says iOS 27.3 will check content behind Anyone with the link shares for harmful material, without defining it, and the penalties reach the account itself.

Flat editorial illustration of a pale cloud above three document cards, the right card marked with a rust dot, and a large dark magnifier at the right.
Conceptual editorial illustration of a content check reaching documents behind a public link; it is not a screenshot and shows no real files.

What do the sources establish?

Recorded source context. No verified social reaction quotes or aggregate vote results are supplied.
Platform / SourceCore Stance / QuoteEngagement MetricTimestamp
Apple will check your public iCloud links for harmful content, and it doesn't rule out banning accountsReported context: [object Object] [object Object] [object Object]Not recorded
Apple Will Check Public iCloud Links for Harmful Content Starting in iOS 27.3Reported context: [object Object] [object Object] [object Object] [object Object]Not recorded

THE SHORT VERSION

  • Apple says iOS 27.3, iPadOS 27.3, macOS 27.3 and visionOS 27.3 will begin checking content shared through public Anyone with the link iCloud links for harmful material.
  • The document does not define harmful content or describe the checks, but it does say Apple may block or disable an Apple Account and involve law enforcement.
  • Public links are not end-to-end encrypted even with Advanced Data Protection on, and Apple has not said whether links created before the update will be checked.

Apple turns the check on

Apple will begin checking public iCloud links for harmful content in iOS 27.3, iPadOS 27.3, macOS 27.3 and visionOS 27.3, according to a new support document. The check covers images in iCloud Photos and files in iCloud Drive shared with the Anyone with the link option, and it does not touch items sent to people you choose. Apple has not published a list of what the check looks for, nor any schedule for publishing one.

The wording is narrow and the reach is not. Anyone with the link has always meant anyone, including Apple, because a public link is public by definition. What changes is that Apple now says it will look at what sits behind those links, which turns a passive hosting arrangement into an active review of the file itself. That is a bigger shift than one sentence of documentation admits.

Only the public option is covered

Apple offers two ways to share: People you choose, which limits access to invited accounts, and Anyone with the link, which opens the item to whoever holds the address. Only the second option is being checked. Files sent with Send a Copy, which delivers a separate file rather than a link, fall outside the change. Both choices sit in the same share sheet, a line apart, and look equally ordinary.

That distinction matters for anyone who assumed a link was private because it was unlisted. A public link can be forwarded, posted or indexed, and Apple now treats it as content published to the world. Sharing with named people avoids the check, which is the practical advice both source articles give their readers. Neither outlet expects most people to notice anything at all.

Harmful content is never defined

Apple does not define harmful content, and it does not explain how the checks work. MacRumors suggests the phrase could cover malware, malicious files or child sexual abuse material, given Apple's reference to law enforcement, but the company has not said so. Digital Trends reaches the same reading and labels it an inference. The document names no category, no example and no threshold that a reviewer could apply.

An undefined category is hard to argue against. A user whose link is flagged will not know which rule was applied or who looked at the file, because Apple has published no threshold, no notice process and no timetable for a decision. The document describes the penalties in detail and the test itself in a single sentence. That is a thin description of a system that can end an account.

Account bans are on the table

If Apple flags content as harmful, the support document says the company reserves the right to move, refuse, modify, remove or delete it at any time. Apple may also act against the account behind the link, including blocking or disabling the Apple Account and blocking a new one registered with the same email address or phone number. The list of possible actions runs longer than the sentence describing the check.

Involving law enforcement is listed as a further step, if necessary. That is a wider set of penalties than the link itself, and it is the part of the document that turns a content rule into an account risk. An iCloud account holds photos, device backups, messages and payment details, so losing it is not a minor sanction. Everything behind one login goes with it.

The encryption trade-off underneath

Public links are not end-to-end encrypted, even when Advanced Data Protection is switched on. Apple cannot inspect what it cannot read, so a server-side check needs readable content, and the document confirms that items made available to anyone lose that protection. Advanced Data Protection still covers the rest of the account rather than the public link. The check only works because those files are readable on Apple's servers.

This is the oldest trade-off in the file. Checking only public links keeps the scan away from private photos and backups, which is the narrowest version Apple could have shipped. It still means the company reads user files rather than metadata, and the line between public and private now carries a review step with consequences attached. Apple has chosen the narrowest scope and the widest set of penalties.

Betas now, a December release

The betas are with developers now, and MacRumors reports a public release in December. Digital Trends dates the stable build to December 2026. That leaves a few months for the behaviour to be tested by people who read support documents for a living, and for Apple to publish the details it has left out of this one. Nothing in the document commits the company to doing so before launch.

Apple has not said whether links created before the update will be checked, MacRumors notes. That gap covers years of existing shares, and it is the first question anyone with an old public album would ask. Silence on retroactivity is not a denial, and the document's phrasing concerns items shared in version 27.3 or later. Anyone holding such a link has no way to find out in advance.

What to watch next

The first test is disclosure: what counts as harmful, who reviews a flagged link, and whether a user can appeal. The second is scope, because a check that starts with public links is easy to extend to shared albums or backups once the plumbing exists. Neither limit is written into the document, and a support page written for users answers none of it.

The third is how Apple describes this in December. A privacy page that says public links are public reads differently from one that describes scanning, and this site has tracked Apple's age-rating work, the China rollout of Apple Intelligence and the Siri recap beta for the same reason. Each of those shipped with a document thinner than the feature it described.

Sources & reporting limits

  1. Apple will check your public iCloud links for harmful content, and it doesn't rule out banning accounts
  2. Apple Will Check Public iCloud Links for Harmful Content Starting in iOS 27.3
Keep the thread.

Follow Policy & safety to find related stories on your next visit.

THE WEEKLY EDIT

The week, made clear.

Stories worth understanding, brought together in one weekly edition.

Share this page

Instagram, TikTok & other apps

Copy the page link, then paste it where your chosen app supports links. You choose whether to send or publish.