Cybersecurity experts are warning the public to be cautious of fake party invitations circulating through text messages, email and social media, as cybercriminals increasingly use the tactic to steal personal and financial information.
The fraudulent messages often appear to be invitations to birthdays, weddings, graduations or other celebrations. Scammers design the invitations to look legitimate. They typically include a link directing recipients to fake websites that mimic trusted event or ticketing platforms.
Security experts say the objective is to persuade recipients to click the link and disclose sensitive information, such as usernames, passwords or banking details. In some instances, clicking the link may also install malicious software on a device.
Scammers frequently create a sense of urgency or curiosity, luring people to respond without verifying the sender’s identity. They may also tailor messages around holidays, popular events or seasonal celebrations to make the invitations appear more real.
The Federal Trade Commission Consumer Service recommends the following precautions:
- Use security software. Protect your computer with trusted security programs and set them to update automatically to defend against new threats.
- Update your phone. Turn on automatic updates for your mobile software. These updates often include critical protections against security risks.
- Enable multi-factor authentication. Add an extra layer of protection to your accounts by requiring more than a password. Options include: 1. Something you know, such as a passcode, PIN, or security question; 2. Something you have, like a one-time code sent by text, email, or an authenticator app, or a physical security key; and 3. Something you are, such as a fingerprint, retina, or facial scan. Multi-factor authentication makes it harder for scammers to break in, even if they steal your username and password.
- Back up your data. Save copies of your files to an external hard drive or a cloud service. Don’t forget to back up your phone data, too.
Officials also advise users to be suspicious of messages requesting passwords, payment information, or other sensitive data. Legitimate organizations generally do not request such information via unsolicited messages. They say taking a few moments to verify an invitation before clicking a link can help reduce the risk of identity theft, account compromise, and financial fraud.
Officials encourage the public to remain vigilant as online scams continue to evolve and report suspicious messages to authorities. They emphasize that taking a few moments to verify the sender and inspect web links can help prevent fraud and protect personal information from cybercriminals. Remembering the risks posed by a fake party invitation-style scam is essential for online safety.
