Pennsylvania Attorney General Dave Sunday is warning residents about a scam involving fake digital invitations sent from compromised email accounts.
The scam targets consumers through email invitations that appear to come from a friend or acquaintance. The messages may claim to be for an event, conference or birthday party and often include a link asking recipients to view the invitation and RSVP.
According to the Office of Attorney General, clicking the link may prompt users to log in or connect with a Google, Apple, Microsoft or similar online account. Doing so can lead to malware being installed on a device or email credentials being stolen.
Legitimate invitation platforms do not require users to sign in simply to view an invitation.
“Scammers are constantly evolving their tactics to appear more credible and trustworthy,” Sunday said. “If you receive an unexpected invitation that requires you to log in or provide personal information, take a moment to verify it directly with the sender – that extra step can protect your personal data and prevent serious harm.”
Officials said consumers should verify unexpected invitations directly with the sender by text or phone call. Legitimate invitations will not ask users to enter a password and rarely require a download. Consumers should also hover over links to confirm they lead to a legitimate website and avoid clicking if they are unsure.
Anyone who believes their email may have been compromised should change their email password immediately, enable two-step authentication and report the email to their provider as a phishing attempt or scam.
Consumers with questions or those who believe they may have been involved in a scam can contact the Office of Attorney General’s Bureau of Consumer Protection at scams@attorneygeneral.gov or by calling 1-800-441-2555.
