Medium riskEmail

Calendar Invite Phishing Scam

This scam sends unsolicited calendar invites that auto-add events to your schedule, with notifications containing phishing links or fake alerts that lure you to malicious sites or scam pages.

Quick verdict

Risk level
Medium risk
Scam type
Calendar-injection phishing
Main red flag
Unexpected calendar events appear with links to claim prizes, fix accounts, or view files.
What to do first
Do not tap the links. Delete the events and turn off auto-adding invites.

How this scam works

This scam sends unsolicited calendar invites that auto-add events to your schedule, with notifications containing phishing links or fake alerts that lure you to malicious sites or scam pages.

Email scams, or phishing, remain one of the most common ways criminals steal logins, payment details, and money. A convincing message imitates a brand or contact and steers you toward a fake login page, a malicious attachment, or a fraudulent payment.

In short, the giveaway is usually simple: Unexpected calendar events appear with links to claim prizes, fix accounts, or view files. Do not tap the links. Delete the events and turn off auto-adding invites.

Scammers rotate tactics constantly, the same operation may also run the Fake Zoom Invite Scam and the Malware Attachment Scam. See the full Email Scams guides hub, or test a suspicious message with the scam checker.

How to spot this scam

  • Calendar events you did not create
  • Event titles about prizes, payments, or security alerts
  • Links inside event details or notifications
  • Invites from unknown senders
  • Pressure to act from a calendar reminder

What the message looks like

Example pattern, not a real report
Example pattern: A calendar event you never created appears, titled 'You have (1) pending payment, click to review', with a reminder linking to a phishing page.

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

What gives it away: Unexpected calendar events appear with links to claim prizes, fix accounts, or view files.

The scale of it

Most reported
phishing was the most common type of cybercrime complaint reported to the FBI in 2023
$12.5B
total reported internet-crime losses in the US in 2023

How to protect yourself

  • Do not tap links inside unexpected events
  • Delete the events and report the sender as spam
  • Turn off automatically adding invites in your calendar settings
  • Run a security scan if you interacted with a link

Already responded? Do this now

  • If you entered details on a linked page, change that password immediately
  • Enable two-factor authentication on affected accounts
  • Remove the malicious events and block the sender
  • Watch for further phishing

Mistakes to avoid

  • Do not tap links in unsolicited calendar events
  • Do not enter logins on pages reached from a calendar reminder
  • Do not leave auto-add enabled if you get spam invites

Related scams to know

Common questions

How did an event get into my calendar?
Some calendars auto-add invites, so spammers send events that appear without your action. Turning off automatic adding stops most of these.
Are the links dangerous?
Yes. They lead to phishing or scam pages. Treat any link inside an unexpected event as malicious and do not tap it.
How do I stop these invites?
Adjust your calendar settings so invites are only added when you accept, delete the spam events, and report the senders.
I clicked a link. What now?
If you entered any details, change that password from a trusted device, enable two-factor authentication, and remove the events.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.