The FTC warns that phishing messages claiming to be party invites trick recipients into entering email login credentials or passcodes. Scammers then take over email accounts and can contact the victim’s friends to spread the scam.

The Federal Trade Commission issued a consumer alert warning about a credential-stealing scam disguised as an “invitation.” The scheme typically uses unexpected texts or emails that appear to be from invitation platforms, prompting the recipient with messaging such as “You’re invited.” Instead of merely showing details, the scam directs victims to enter sensitive information—such as their email address and password—or to submit a passcode to view the invitation. The FTC says the scammers use these credentials to gain control of the victim’s email account, enabling further abuse, including sending the same invitation scam to other contacts. This kind of phishing is especially effective because the lure is socially believable and can spread quickly through personal networks. Once attackers access email, they may reset passwords for other services, intercept verification codes, and impersonate the victim for additional fraud attempts. The FTC alert emphasizes that invitation messages that ask for login credentials are a major red flag. Consumers are advised to avoid entering passwords into unsolicited prompts and to use trusted, official methods to access invitations. The alert is a direct, actionable warning tied to account takeover and identity theft risks.