RSVP Credential Trap

The FTC says fake party invites are phishing scams, because apparently even brunch needed a login ambush

The FTC says scammers are sending fake Evite-style and Paperless Post-style invitations that ask people for email passwords or phone verification codes.

What Happened

The Federal Trade Commission warned last week that scammers are sending unexpected "You're invited" texts and emails that are actually phishing scams.

The FTC says the fake invitations may look like they come from well-known platforms such as Evite or Paperless Post. Some list someone the target knows as the host, then ask for an email username and password to view the event details.

Other versions ask for a phone number and a special code to RSVP. The FTC's advice is blunt: that is not how real invitations work, and the scammer may be trying to steal or reset your account information.

Why This Matters

Email accounts are master keys. Once a scammer gets in, they can reset other accounts, search for financial information, impersonate the victim and send the same fake invite to the victim's contacts with a fresh layer of credibility.

The timing is not random either. The FTC notes it is graduation and summer party season, which means people are expecting invitations. Scammers love a seasonal doorway because it gives the con a normal-looking reason to exist.

The Dumb Part With The RSVP Password

The dumb part is that scammers looked at the ancient human ritual of "do you want to come eat snacks in a backyard" and decided it needed credential theft. Somewhere, a fake party invite is asking for an email password like it is guarding the nuclear launch codes for potato salad.

The fix is simple but annoying: do not click unexpected invite links, check with the supposed host another way, use two-factor authentication and change passwords quickly if you handed over information. Modern etiquette now includes confirming that the barbecue is not a phishing portal. Beautiful civilization we built here.

The Bottom Line

Fake invitation scams are using social trust and party season to steal account access. The real stupid shit is that even an RSVP now needs the same threat model as online banking.

Sources

FTC: Asked to enter your email address and password to open a party invite? That's a scam


← Back to Scam Watch