Scammers are using fake party invitations that appear to come from friends, family members, coworkers, and neighbors on Facebook. At first glance, everything about the email looks legitimate. The invitation may come from a real Gmail account, include the sender’s email signature, phone number, website, and even a photo.
How the Scam Works
The scam works differently on smartphones. Instead of asking users to download software, victims may be asked to sign in with their email account. If they enter their username and password, they’re handing that information directly to the scammers.
One of the most alarming parts of this scam is that the invitation often does come from a friend’s real email account. The friend likely received the same fake invitation, entered their login information, and unknowingly gave scammers access to their email account. Once inside, the scammers send more fake invitations to everyone in that person’s contacts.
How to Protect Yourself
The best defense is skepticism. If you weren’t expecting an invitation, don’t click the link. Instead, contact the sender another way and ask if they really sent it. Avoid downloading files attached to unexpected emails, especially EXE files. Keep your computer, smartphone, and web browser updated with the latest security patches. Turn on two-factor authentication for your email account and other important accounts.
The Federal Trade Commission warns that legitimate invitation services should not require your email password just to view an invitation. If you’re being asked to sign in with your Gmail or Outlook credentials simply to see party details, that’s a major red flag.
If you entered your email password after clicking one of these invitations, change your password immediately. Turn on two-factor authentication if you haven’t already. Review your account’s security settings and look for any email forwarding rules you didn’t create. Let your contacts know your account may have been compromised.
Original reporting: Alabama News Network — read the source article.