PSA: Unsolicited Calendar Invites Are a Growing Phishing Threat
Unsolicited calendar invites are sneaking into our calendars. It’s a growing threat, and AI can help make some scams more convincing and personal.
We all know to be cautious with unexpected calls, emails, and texts. Now there’s another place to pause before responding: your calendar.
I’ve started receiving invitations to AI workshops I never registered for. In the past month, I’ve gone from seeing almost none to receiving around three a day. Some unsolicited invitations may be marketing or mistakes. Others may be phishing attempts designed to get someone to click a link, enter a password, share a verification code, or reveal private information.
This is not just a theoretical concern. In October 2026, security researchers at Check Point reported a sharp rise in a calendar-invite phishing campaign targeting Microsoft credentials. Their detection system flagged more than 302,000 unique emails across more than 40,000 organizations. Those figures describe emails detected in that campaign, not confirmed victims.
AI can add to the risk. Microsoft has documented phishing operations that used AI to tailor messages to a person’s role and automate parts of an attack. That doesn’t mean every suspicious calendar invite is AI-generated. It does mean scammers can use AI to help make some lures more personal and convincing.
Why a calendar invite can feel trustworthy
Calendar invitations may be handled differently from ordinary email, depending on your calendar service and settings. Some services can add invitations automatically. An event appearing on your calendar is not proof that it’s safe, and it may not come with the same familiar spam warnings you expect in your inbox.
A suspicious invite might contain a fake meeting link, a QR code, a request to sign in, a phone number for “support,” or instructions to download software. A familiar name or a link to a real meeting platform doesn’t prove the invitation is genuine. Scammers can impersonate people, and real accounts can be compromised.
The biggest risk often comes from what happens next. If you enter your password or verification code on a fake page, a scammer may try to use it to access your account. If you join an unexpected meeting and share your screen, attendees may see whatever is visible, including messages, documents, and notifications. Don’t install remote-access software or share security codes because an unexpected caller or meeting host asks you to.
What to do with an unexpected invite
Pause before accepting, clicking, scanning a QR code, or signing in through an invitation you didn’t expect.
Verify it independently. Contact the person using a phone number or email address you already trust, not the details in the invite.
Report suspicious invitations as spam or phishing using your email or calendar service. If you’re at work, report them to your IT or security team.
Remove the event and review your calendar settings. Many services let you limit which invitations are added automatically.
If you already entered your password, go directly to the real service’s website or app, change your password, sign out of other sessions, and turn on multi-factor authentication. Contact your IT team or financial institution if work or payment information may be exposed.
You don’t need to assume every unfamiliar invite is malicious. Just don’t let a polished message or a familiar-looking calendar entry rush you into a decision.
Your calendar can hold the invite, but it can’t vouch for the sender. Stay smart: pause, verify, then decide.
Comments