Beware of Online Invitation Scams

Getting an unexpected party invitation can be a fun surprise, but before you RSVP, make sure the invitation is real.

Authorities are warning about a growing phishing scam involving fake digital invitations that look like they came from popular services such as Evite, Paperless Post or Punchbowl. The goal is simple: get you to click a link, enter a password or download something that gives scammers access to your personal information.

Why Fake Invitations Can Be Dangerous

A fake invitation may lead to a website designed to steal your email address and password. If you use that same password for other accounts, scammers may be able to access your email, financial accounts or other personal information. Some malicious links may also attempt to install malware on your device.

These scams can be especially convincing because an invitation feels personal, and scammers may even use a compromised contact list to make it appear that the invite came from someone you know.

Before You RSVP

• Look closely at the sender. Legitimate invitations should come from the invitation service’s actual domain, such as evite.com or paperlesspost.com.
• Check the link before clicking. Hover over it on a computer or press and hold it on your phone. If the web address looks unfamiliar or strange, don’t open it.
• Go directly to the invitation site. Instead of using the link, open the service’s website yourself and sign in to see your invitations.
• Ask the host. If you weren’t expecting an invitation, a quick text or call can confirm whether it’s legitimate.
• Be suspicious of login or download requests. You shouldn’t need to download a file or provide account credentials simply to see an invitation.
• Watch for vague details. Real invitations usually include specifics about the host, event, location and other details.

An invitation is designed to make you want to click. Give yourself a few seconds to check who sent it and where the link goes before you RSVP.