Medium riskEmail Scams

Calendar Invite Phishing Scam

This scam sends unsolicited calendar invites that auto-add events to your schedule, with notifications containing phishing links or fake alerts that lure you to malicious sites or scam pages.

Quick verdict

Risk level
Medium risk
Scam type
Calendar-injection phishing
Main red flag
Unexpected calendar events appear with links to claim prizes, fix accounts, or view files.
What to do first
Do not tap the links. Delete the events and turn off auto-adding invites.

What this scam usually looks like

This scam sends unsolicited calendar invites that auto-add events to your schedule, with notifications containing phishing links or fake alerts that lure you to malicious sites or scam pages.

Example message pattern

Example pattern — not a real report
Example pattern: A calendar event you never created appears, titled 'You have (1) pending payment — click to review', with a reminder linking to a phishing page.

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • Calendar events you did not create
  • Event titles about prizes, payments, or security alerts
  • Links inside event details or notifications
  • Invites from unknown senders
  • Pressure to act from a calendar reminder

What to do

  • Do not tap links inside unexpected events
  • Delete the events and report the sender as spam
  • Turn off automatically adding invites in your calendar settings
  • Run a security scan if you interacted with a link

If you already clicked or replied

  • If you entered details on a linked page, change that password immediately
  • Enable two-factor authentication on affected accounts
  • Remove the malicious events and block the sender
  • Watch for further phishing

What not to do

  • Do not tap links in unsolicited calendar events
  • Do not enter logins on pages reached from a calendar reminder
  • Do not leave auto-add enabled if you get spam invites

Similar scams

Medium risk Email

Fake Zoom Invite Scam

This scam sends a fake Zoom, Teams, or video meeting invite by email and urges you to join or review a missed meeting through a link that leads to a fake login page built to capture your work or email credentials.
High risk Email

Malware Attachment Scam

In a malware attachment scam, an email arrives with a file posing as an invoice, receipt, CV, statement or delivery note. Opening the attachment, or clicking a prompt to 'enable content' or 'enable macros', can quietly install malware that steals passwords, banking logins or files. The message is often crafted to feel urgent or routine so you act before thinking. Treating every unexpected attachment with caution, and verifying it through a separate channel, is one of the most effective defences.
Medium risk Email

Email Storage Full Scam

This scam warns that your mailbox or storage is full and that you will stop receiving messages unless you 'verify' or 'upgrade' through a link. The link leads to a fake webmail login page that captures your email password.

Frequently asked questions

How did an event get into my calendar?
Some calendars auto-add invites, so spammers send events that appear without your action. Turning off automatic adding stops most of these.
Are the links dangerous?
Yes. They lead to phishing or scam pages. Treat any link inside an unexpected event as malicious and do not tap it.
How do I stop these invites?
Adjust your calendar settings so invites are only added when you accept, delete the spam events, and report the senders.
I clicked a link. What now?
If you entered any details, change that password from a trusted device, enable two-factor authentication, and remove the events.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.