The Federal Trade Commission issued a warning about phishing scams using fake graduation and summer party invitations sent via email and text [1, 2].
These attacks target individuals during high-celebration seasons when people are more likely to expect social invites. By exploiting the fear of missing out, scammers can harvest sensitive personal and financial information from unsuspecting victims [3, 4].
The FTC said the fraudulent messages are designed to trick recipients into clicking malicious links [1, 2]. Once a user clicks, they may be directed to sites that steal credentials or install malware on their devices.
To increase the legitimacy of the scam, attackers are spoofing well-known digital invitation platforms [3, 5]. These include services such as Evite, Paperless Post, and Punchbowl [3, 5]. The messages often mimic the branding and tone of these services to deceive the user into believing the invite is from a trusted friend or family member [4, 5].
This trend was reported as early as April 2026, coinciding with the start of the graduation season [4]. The FTC said that these phishing attempts are becoming more sophisticated in their appearance to better mimic legitimate digital invitations [1, 2].
Authorities recommend that consumers remain vigilant when receiving unexpected invitations. Instead of clicking links in a text or email, users should contact the purported sender through a known, separate channel to verify the event's authenticity [1, 2].
“Scammers are spoofing legitimate digital invitation platforms”
This campaign highlights a shift toward 'seasonal phishing,' where attackers align their tactics with cultural calendars to lower a victim's guard. By impersonating trusted third-party platforms like Evite, scammers bypass the skepticism users might have toward a random email, instead leveraging the perceived security of a recognized brand to gain access to financial data.
