Don’t RSVP Yet: How to Spot an Evite Scam

Summary

• Identity criminals are spoofing popular platforms to carry out a sophisticated Evite scam designed to steal your data. 
• These emails prey on your desire for social connection, making them harder to tackle than typical “fear-based” threats. 
• Clicking a link in a fake invite can silently install malware that harvests your passwords and personal information. 
• Some versions of the scam ask you to enter your email password, giving identity criminals full control over your entire digital life. 
• If you’ve received one of these invitations or believe you’ve been targeted, contact the Identity Theft Resource Center for free help via text or phone call at 888.400.5530 or live chat on our company website. 

What’s Happening?

Most phishing attempts try to scare you with talk of hacked bank accounts or legal fines. This Evite scam is much more subtle. It hijacks your excitement about seeing friends or attending a celebration. You might receive an email that appears to be a legitimate invitation from a former colleague, a classmate or even an old friend. 

Once you click the link, one of two things usually happens. In some cases, the link appears “dead” or broken. However, it activates malware in the background that steals your passwords and personal details. In other versions of this Evite scam, the link takes you to a page that asks for your email password to “view the invitation.” If you provide it, scammers can take over your email, reset your passwords for other accounts and even access your bank or health insurance information. 

What Do They Want? 

Identity Criminals use these “friendly” overtures to gain a foothold in your private digital world: 

• Email Access: By stealing your login credentials, they can take over your identity and send more scam invites to your contacts. 
• Sensitive Data: They look for passwords, bank details and personal information stored on your devices or in your inbox. 
• Malware Installation: Using a “trojan horse” approach, they install software that monitors your activity and steals data silently. 

How Do You Protect Yourself from Evite Scams? 

• Check the Details: Look for generic phrasing like “memory-making celebration.” Real invites usually include specific details, such as a book club talk or a birthday party. 
• Verify the Sender: If you receive an invite from someone you haven’t spoken to in years, reach out to them through a different channel (like a text or phone call) before clicking. 
• Never Re-enter Passwords: Legitimate invitation sites will not ask you to enter your email password just to view a card or RSVP. 
• Inspect the Links: Hover your mouse over the “Click here” link to see the actual URL. If it doesn’t lead directly to the official platform, do not click. 

Contact the ITRC 

If you clicked a link and it didn’t open, or if you shared your password with a fake site, it could be an Evite scam. Don’t wait for things to go wrong. The Identity Theft Resource Center provides clear, step-by-step guidance to help you protect your identity. Our advisors are experts who provide free help and a plan to keep you safe. Contact the ITRC for free help via text or phone call at 888.400.5530, or live chat on our company website.