The invitations include a link asking users to log in or connect with their Google, Apple, or other account to view it. Doing so may lead to compromised accounts.
HARRISBURG, Pa. — Pennsylvania Attorney General Dave Sunday warned residents this week about a new scam involving email invitations from compromised accounts belonging to friends or acquaintences.
The recipient of the email is invited to an event, conference, or birthday party, Sunday said. The emails often include a link prompting recipients to view the invitation and RSVP.
But when they click the link, users may be asked to log in or connect using a Google, Apple, Microsoft, or similar online account, according to Sunday.
Doing so can result in malware being installed on your device or your email credentials being stolen. Legitimate invitation platforms will not require you to sign in simply to view an invitation.
“Scammers are constantly evolving their tactics to appear more credible and trustworthy,” Sunday said. “If you receive an unexpected invitation that requires you to log in or provide personal information, take a moment to verify it directly with the sender – that extra step can protect your personal data and prevent serious harm.”
How to spot these scams:
- Verify the invitation with the sender of the email via a text or telephone call.
- Legitimate invites will never ask you to enter a password and rarely will ask you to download anything.
- Hover over links to confirm they lead to a legitimate website – if you’re unsure, do not click.
- Be cautious of generic invites.
What to do if you think your email may be compromised:
- Change your email password immediately.
- Enable two-step authentication for your email account.
- Report email to your provider as a phishing attempt or scam.
Consumers with any questions or believe they may have been involved in a scam should contact the Office of Attorney General’s Bureau of Consumer Protection by visiting the website, by emailing scams@attorneygeneral.gov or by calling the office at 1-800-441-2555.
