Summer is the season for cookouts and graduations, but scammers are exploiting this with fake invites. In late May, the Federal Trade Commission warned of unexpected 'You're invited' texts and emails—phishing scams designed to steal personal and banking information. Scammers impersonate official entities or friends, using platforms like Evite or Paperless Post to trick recipients.
How the Scam Works
Fake invites look legitimate, mimicking real online invitations. However, they require you to enter your email username and password to view event details. Some ask for a phone number and a special code to RSVP. Once scammers have this info, they can access your accounts and target your contacts.
Amy Nofziger of the AARP Fraud Watch Network notes a seasonal uptick. In one week, five people reported compromised accounts after clicking a fake invite. One victim's internet browsing was redirected to strange sites after providing her password.
Spotting a Fake Invite
Real invites include specific details like dress codes or parking options. Scams are generic. Check the domain: legitimate Evites come only from evite.com. Paperless Post requires no login or download to view invites. Be wary of any request for personal credentials to RSVP.
What to Do If You Click
If you suspect a scam, change your password immediately and enable two-factor authentication. Report the phishing attempt to the brand (e.g., phishing@paperlesspost.com) and the FTC at ReportFraud.ftc.gov. Text the sender directly to verify the invite.
Prevention Tips
- Assume unexpected invites are scams until confirmed.
- Look for generic language vs. specific details.
- Never share passwords or personal info to RSVP.
Nofziger advises pausing and scrutinizing the invite. If you're hosting a party, alert guests beforehand so they know to expect your invite.
