A growing trend in digital fraud involves the use of calendar invitations to conduct phishing attacks. Scammers send unsolicited calendar entries to users, often disguised as project reviews or important meetings. When a user clicks on the link provided in the calendar event, they are redirected to a fraudulent website designed to mimic a legitimate login portal.

Once the user enters their credentials on these deceptive sites, the attackers capture the information. These stolen login details are then typically sold in bulk to other malicious actors or used directly to gain unauthorized access to the victim's accounts. This method exploits the trust users place in their digital scheduling tools, as people are often less suspicious of a calendar notification than they are of an email or text message. Security experts emphasize that these scams rely on the victim's assumption that they simply forgot about a scheduled commitment, prompting them to click the link to investigate further.