Be cautious of vague party invitations arriving in your inbox from distant acquaintances. A recent report by the New York Times highlights a new phishing scam that involves sending fake party invitations designed to resemble those from platforms like Paperless Post, Evite, and Punchbowl. These scams often come from familiar contacts whose email accounts have been compromised, making it even more challenging to detect them as fake.
One Mashable editor received an invitation masquerading as a Punchbowl invite from her sister-in-law, prompting her to click the link. When asked to enter her Gmail password, she realized her sister’s email was hacked.
The scams operate in two ways, as per the Times. The link might appear inactive yet deploy malware that steals personal data. Alternatively, it leads you to enter login credentials, granting hackers access to personal accounts. According to Rachel Tobac, CEO of SocialProof Security, the scam thrives on FOMO (fear of missing out), capitalizing on human psychology.
Fake invitations are often vague with generic terms like “birthday party,” unlike genuine invites that specify event details. Paperless Post encourages users to report suspicious invites via a dedicated email address.
To stay safe, trust your instincts if an invitation seems uncharacteristic, and refrain from clicking. Report, delete, or ignore such emails to prevent falling victim to scams.