Fake Digital Party Invitations Target Email Credentials

Criminals are using fraudulent links mimicking service providers to access personal accounts and steal rewards.

Updated on Oct. 29, 2026 in Financial Crime

Fake Digital Party Invitations Target Email Credentials

Live Poll

Do you verify the sender before clicking links in unsolicited party invitations?

Scammers are sending out sophisticated, fake party invitations that impersonate services like Evite to trick recipients into revealing their email passwords. Once victims enter their credentials on a malicious site, attackers gain control of their accounts to steal loyalty rewards and airline miles.

Why it matters

This scheme exploits the excitement surrounding social events, making it easy for unsuspecting users to compromise their personal security. By gaining access to email, bad actors can exploit sensitive data and financial assets linked to those accounts.

The AARP Fraud Watch Network reports receiving roughly one complaint every one to two days regarding these fraudulent invitations. The full scope of stolen rewards and affected users is still currently under investigation.

The players

AARP Fraud Watch Network

This organization provides resources and alerts to help consumers identify and avoid various forms of financial fraud and identity theft.

Evite

This is a popular digital platform used for creating, sending, and managing invitations for various social events and parties.

The details

The emails appear to originate from familiar contacts who have already had their accounts compromised, increasing the perceived legitimacy of the invitation. The fraudulent websites are designed to mimic legitimate invitation services, prompting users to select their email provider and enter their private passwords.

Graduation season saw an increase in complaints regarding the scam.
The Fourth of July holiday period saw an increase in complaints regarding the scam.
October 29, 2026 is the date of this report.
Halloween, Thanksgiving, and the December holidays are expected to see an increase in activity.

Legal Context

This scam follows the pattern set by the 2024 surge in phishing-related credential harvesting by shifting focus to social event-themed lures. Such digital identity crimes often see spikes during high-traffic holiday seasons when communication volumes rise.

Residents should exercise extreme caution when clicking invitation links, even those sent by known contacts, if the site requests an email password. If you suspect you have been targeted, you can contact the AARP Fraud Watch Network helpline at 877-908-3360.

The takeaway

Never enter your email password on a third-party website that you were directed to via an invitation link. If you receive an unexpected party invite, confirm it with the sender through a separate, trusted channel before interacting with the message.