What Happened
The Federal Trade Commission warned Tuesday that scammers are sending unexpected "You're invited" texts and emails during graduation and summer party season.
The fake invitations may look like they come from well-known invitation platforms such as Evite or Paperless Post. The FTC said some messages list someone the recipient knows as the host, then require an email username and password to see event details. Others ask for a phone number and a special code to RSVP.
The agency's warning is blunt: real invitations do not work that way. The goal is to steal or reset account information, take over an email account, and then send the same scam to the victim's contacts.
Why This Matters
Phishing keeps working because it borrows ordinary social habits. A fake bank alert triggers fear. A fake package notice triggers curiosity. A fake party invite triggers politeness and the tiny panic of not wanting to miss something you were apparently invited to.
The FTC's advice is to resist clicking and check with the supposed host directly. It also recommends updated security software, two-factor authentication, quick password changes if credentials were exposed, and reporting phishing emails and texts.
The Dumb Part With The RSVP Password Trap
The dumb part is asking people to hand over their email password to see whether there will be sheet cake. That should feel wrong immediately, but scammers know modern account flows have trained everyone to type codes into little boxes until the internet lets them proceed.
There is also a nasty network effect here. If the scammer gets one email account, the next wave comes from someone real enough to make the bait smell familiar. Congratulations, your inbox has become a party-planning zombie machine.
The Bottom Line
If an unexpected invitation asks for credentials or a passcode, verify it through a separate channel before touching the link. The real stupid shit is that even an RSVP now needs a small cybersecurity audit.