Scammers are sending fake Evite-style texts and emails during graduation season, tricking people into sharing passwords and security codes.
WASHINGTON — It’s almost summer time, and many cookouts and graduation parties are popping up, but the Federal Trade Commission is warning consumers to watch out for fake digital invitations that are actually phishing scams designed to steal personal information.
The FTC said scammers are sending unexpected texts and emails that appear to come from popular invitation services like Evite and Paperless Post. The messages often claim to be from someone the recipient knows and may ask users to enter their email login credentials or provide a special verification code to view party details or RSVP.
“That’s not how real invitations work,” the FTC said in a consumer alert issued this week.
Officials warned that scammers may use stolen login information to take over email accounts and send additional phishing messages to the victim’s contacts.
How the scam works
According to the FTC, the scam usually starts with an unexpected invitation message tied to graduation parties, summer celebrations or other events.
Some fake invitations direct users to a login page asking for an email username and password, while others request a phone number and a one-time verification code.
The FTC said legitimate invitation platforms generally do not require users to hand over passwords or special access codes to open invitations.
If consumers receive an invitation they were not expecting, the agency recommends contacting the supposed host directly before clicking any links.
How to protect yourself
The FTC recommends several ways consumers can protect themselves from phishing scams:
• Keep computer and phone software updated to help defend against security threats.
• Use two-factor authentication on email and other online accounts.
• Avoid clicking suspicious links or entering login credentials into unfamiliar websites.
• Change passwords immediately if you believe your account information has been compromised.
Consumers can forward phishing emails to reportphishing@apwg.org and forward scam text messages to 7726, which spells SPAM. Phishing attempts can also be reported to the FTC at ReportFraud.ftc.gov.