Official warning
Fake party invitations are stealing email logins
Unexpected invitation messages are directing people to pages that ask for an email password or verification code.
How it works
The invitation may name somebody you know. The fake RSVP page then asks for credentials that can be used to take over your email account.
A message might say
“You are invited. Sign in with your email account and enter the code we send to see the event details.”
Warning signs
- ●You were not expecting an invitation
- ●The RSVP page asks for an email password
- ●You are asked to share a one-time verification code
What to do
- 1Check with the host using contact details you already have
- 2Never share a password or one-time code to view an invitation
- 3Change your email password quickly if you entered it
Source: Federal Trade Commission. Ward has rewritten the warning in plain language.