Warning Regarding Growing Calendar Phishing Scams

Calendar phishing scams are growing rapidly, targeting individuals and professionals in the UK by exploiting the automatic invitation features of digital calendar platforms like Google Calendar. By sending calendar requests that appear automatically in a user's schedule, scammers bypass traditional inbox filters. Because these notifications appear alongside legitimate appointments or work meetings, they gain an unearned sense of credibility, making users more likely to engage with them. Common examples of these fake entries include voicemail notifications, software renewal prompts, or fake payment confirmations.

For those living in the UK, this threat is particularly concerning as scammers are increasingly using legitimate platforms like Zoom to host their invitations, making them difficult for even advanced security software to block. By customizing the content and potentially using company branding, attackers make these phishing attempts look like internal communications. Once a user clicks a link within the calendar event, they are typically directed to a fake login page designed to steal credentials. Others are lured into calling fake support numbers to cancel non-existent charges. Until the user clicks a link or calls, their data remains secure.

Cybersecurity experts advise maintaining a high level of suspicion regarding any unexpected calendar entries, even if they appear to come from trusted sources or internal colleagues. If you encounter a suspicious invitation, do not click 'decline', as this confirms your email address is active to the scammer. Instead, delete the entry or mark it as spam. The most effective preventative measure is adjusting your calendar settings to disable the automatic acceptance of invitations. By configuring your calendar to only accept requests from known senders, users in the UK can significantly reduce their exposure to these sophisticated phishing tactics and protect their sensitive information from being compromised.

This summary was prepared with AI assistance. Please verify accuracy via the source.
Kaynak: The Guardian Money — https://www.theguardian.com/money/2026/oct/11/calendar-phishing-scam-meeting-renewal-google-microsoft-paypal