diff --git a/packages/cli/src/commands/spaces/destroy.ts b/packages/cli/src/commands/spaces/destroy.ts
index f5fd959cf0..ea5e580190 100644
--- a/packages/cli/src/commands/spaces/destroy.ts
+++ b/packages/cli/src/commands/spaces/destroy.ts
@@ -5,6 +5,7 @@ import * as Heroku from '@heroku-cli/schema'
 import heredoc from 'tsheredoc'
 import confirmCommand from '../../lib/confirmCommand'
 import {displayNat} from '../../lib/spaces/spaces'
+import chalk from 'chalk'
 
 type RequiredSpaceWithNat = Required<Heroku.Space> & {outbound_ips?: Required<Heroku.SpaceNetworkAddressTranslation>}
 
@@ -43,7 +44,19 @@ export default class Destroy extends Command {
     if (space.state === 'allocated') {
       ({body: space.outbound_ips} = await this.heroku.get<Required<Heroku.SpaceNetworkAddressTranslation>>(`/spaces/${spaceName}/nat`))
       if (space.outbound_ips && space.outbound_ips.state === 'enabled') {
-        natWarning = `The Outbound IPs for this space will be reused!\nEnsure that external services no longer allow these Outbound IPs: ${displayNat(space.outbound_ips)}\n`
+        natWarning = heredoc`
+          ${ux.styledHeader('WARNING: Outbound IPs Will Be Reused')}
+          ${chalk.yellow('⚠️  The following outbound IPs (IPv4 and IPv6) will become available for reuse:')}
+          ${chalk.bold(displayNat(space.outbound_ips) ?? '')}
+
+          ${chalk.dim('Please update the following configurations:')}
+          ${chalk.dim('=')} IP allowlists
+          ${chalk.dim('=')} Firewall rules
+          ${chalk.dim('=')} Security group configurations
+          ${chalk.dim('=')} Network ACLs
+
+          ${chalk.yellow('Ensure all IPv4 and IPv6 addresses are removed from your security configurations.')}
+        `
       }
     }
 
diff --git a/packages/cli/test/unit/commands/spaces/destroy.unit.test.ts b/packages/cli/test/unit/commands/spaces/destroy.unit.test.ts
index 2bea983a55..d70af04ee9 100644
--- a/packages/cli/test/unit/commands/spaces/destroy.unit.test.ts
+++ b/packages/cli/test/unit/commands/spaces/destroy.unit.test.ts
@@ -4,6 +4,7 @@ import runCommand from '../../../helpers/runCommand'
 import * as nock from 'nock'
 import {expect} from 'chai'
 import heredoc from 'tsheredoc'
+import stripAnsi = require('strip-ansi')
 
 describe('spaces:destroy', function () {
   const now = new Date()
@@ -25,9 +26,21 @@ describe('spaces:destroy', function () {
 
     api.done()
 
-    expect(stderr.output).to.eq(heredoc`
+    expect(stderr.output).to.eq(stripAnsi(heredoc`
+      WARNING: Outbound IPs Will Be Reused
+      ⚠️  The following outbound IPs (IPv4 and IPv6) will become available for reuse:
+      1.1.1.1, 2.2.2.2
+
+      Please update the following configurations:
+      = IP allowlists
+      = Firewall rules
+      = Security group configurations
+      = Network ACLs
+
+      Ensure all IPv4 and IPv6 addresses are removed from your security configurations.
+
       Destroying space my-space...
       Destroying space my-space... done
-    `)
+    `))
   })
 })