Warning: “You're invited” party e-vite phishing
Unexpected “You're invited” texts and emails around graduation and summer party season ask you to enter your email address and password to view the invitation — it's a phishing page.
During graduation and summer party season, unexpected “You're invited” texts and emails circulate widely, appearing to come from an e-vite or party-planning service. Clicking through leads to a page that asks you to log in with your email address and password before you can see the invitation details.
There is no real invitation — the login form exists only to capture your email credentials. Because so many people reuse passwords, a captured email login can unlock other accounts, including banking and shopping sites, and the compromised inbox can be used to send further phishing messages to your own contacts.
The FTC is warning that a genuine invitation service never needs your email password to show you an invite. If a page asks you to log in with your email credentials to view a message, close it.
What to do
- Never enter your email password on an invitation or “view message” page
- Go directly to the invitation service's official site instead of clicking the link
- If you entered your password, change it immediately and enable two-factor authentication
- Check for suspicious activity or forwarding rules in your email account
- Warn contacts if your account may have sent them phishing invites