Avoid clicking unexpected “You’re invited” emails or text messages, as hackers are sending fake Evite and Paperless Post invitations to steal passwords or install malware. Verify all invitations with the host directly, and never enter your email credentials or passcodes just to open a party invite.
Protect yourself from invitation scams with these steps:
- Inspect the Sender: Real invitations only come from official domains (like `evite.com`). Be highly suspicious of generic addresses like Gmail or Yahoo, even if it claims to be from a friend (their account may have been hacked). [1, 2]
- Check the Links: Hover over the “RSVP” or “View Details” button to see the actual web address before clicking. It should link directly to the official platform (e.g., `evite.com` or `evite.me`). [1, 2]
- Never Enter Passwords to View: Legitimate services do not force you to enter your email username and password just to see who invited you. [1, 2]
- Verify by Phone: If you receive an invite from someone you haven’t spoken to in years, send them a quick text or call them to ask if it is legitimate before clicking.
- If you clicked a malicious link or entered your credentials, immediately change your email password and run an antivirus scan on your device. Review the full FTC Consumer Alert for more details, and read the Evite Phishing Guide to learn how to check email headers for fakes. [1]