Evite scam emails and texts: how to spot a fake invitation
Quick answer
A fake Evite email or text asks you to sign in with your email password, or enter a phone number and code, to see an invitation. Real Evite emails come only from evite.com. Don't click. Report the message, and change your email password if you entered it.
- Pretends to be
- Evite
- First reported
- Latest official alert
- (FTC)
- Last updated
How it works
Scammers send an invitation that copies Evite's look. Some arrive as email, some as text. Evite says it has seen a notable rise in these phishing emails since early 2026, and the FTC issued a consumer alert about fake party invitations in May 2026.
The invitation is unexpected, or appears to come from a friend whose account was hacked. When you open it, you're asked to:
- Sign in with your email address and password to view the invitation.
- Enter your phone number and a code to RSVP.
- Download an attachment to see the details.
The goal is to take over your email account. Once they're in, scammers can reset passwords on other accounts and send the same invitation to everyone in your contacts.
Red flags
- An invitation you weren't expecting, from someone you don't know
- A request for your email password or a code to open an invitation
- The sender's address isn't at evite.com, for example a Gmail or Yahoo address
- A link whose main domain isn't evite.com or evite.me
- An attachment such as a PDF or ZIP file
- A friend's name on a message sent from an address that isn't theirs
Example message
You're invited! [Name] has sent you a private invitation. Sign in with your email to view the details and RSVP: [link]
What to do
- 1
Don't click or sign in
Hover over the link first. Real Evite links go to evite.com or evite.me. If the main domain is anything else, treat it as phishing.
- 2
Check with the host
If it seems to come from someone you know, ask them on a separate channel whether they sent it. Their account may have been hacked, so tell them.
- 3
If you entered your email password
Change it now, turn on two-factor authentication and check your email's forwarding rules and recent sign-ins. Change the password on any other account that used the same one.
- 4
If you clicked but entered nothing
Clear your browser's cookies and cache and run a security scan on your device.
- 5
Report it
Forward the email to reportphishing@apwg.org, forward texts to 7726 (SPAM) and report it at ReportFraud.ftc.gov. You can also mark it as phishing in your email app.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers choose targets from lists of email addresses and phone numbers that come from data breaches and people-search sites, and from the contacts of accounts they've already taken over. Serus finds where your address, phone number and email are listed and removes them, and alerts you when your details show up in a breach, so fewer scammers can build a convincing message about you.
Official alerts
Frequently asked
Is Evite a scam?
No. Scammers copy Evite's branding. Evite says its real emails come only from evite.com and its subdomains.
Do real Evite invitations need my email password?
No. Evite says real invitations don't require you to sign in with your email account to view them.
A friend sent me an Evite from a Gmail address. Is it real?
Treat it as suspect. Evite emails come from evite.com addresses. Check with your friend another way.
How do I check the sender in Gmail?
Evite says you can open the three-dot menu, choose Show original and look at SPF, DKIM and DMARC. Real Evite emails pass all three.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
