Scam Spotlight: Scam Alerts Hidden Inside Facebook Event Invitations

Scam Spotlight: Scam Alerts Hidden Inside Facebook Event Invitations

Scammers have started hiding fraud messages inside real, legitimate-looking meeting and event invitations — including Facebook's own event invite notifications. Because these invites are sent from the platform's real mail servers, they pass normal email authentication checks and can slip past spam filters, making them look far more trustworthy than a typical phishing email.

1. What This Scam Looks Like

  1. You receive what looks like a normal calendar or event invitation, often through a real service like Facebook Events.
  2. The invitation's title or subject line contains an urgent or financial hook — for example, a fake invoice number, a dollar amount, or a "purchase confirmation."
  3. The real scam message is buried inside the event's description or details field: a claim that unauthorized or fraudulent transactions were made on your account, along with a phone number to call to "cancel" the charge.
  4. Because the invite is delivered through a legitimate platform's mail servers, it can pass email authentication checks (SPF/DKIM/DMARC) and slip past normal spam filtering.

2. A Typical Example

Quote
Subject: [Scammer Name] invited you to "Here's invoice INV-991234 for USD $432.56 from PayPal for purchase of BTC."
From: "[Scammer Name]" <notification@facebookmail.com>
Event: Here's invoice INV-991234 for USD $432.56 from paypal for purchase of BTC.
Some suspect and unlawful transactions connected to your bank account used fraudulently for purchasing $489.78 btc coin. Kindly contact +1 (806) 438-0697. To Cancel It! Order number: BH348912.
Call the Helpdesk at +1 (806) 438-1668 to stop the charge. $489.89 has been deducted. If you did not make this purchase or if you would like a refund, please give us a call.

3. Red Flags in This Example
  1. The subject line itself is the scam pitch — a legitimate calendar invite would never have a "paid invoice" or purchase confirmation as its event title.
  2. The message creates urgency and fear ("unauthorized," "unlawful transactions," "kindly contact...to cancel it") to pressure an immediate phone call.
  3. Two different phone numbers are given for the same "issue" — a common sign of a scripted scam trying to sound official.
  4. The invite even includes the platform's own built-in warning ("This event invitation was not sent by Meta") — the invitation feature itself is being abused, not the account security system.
  5. There is no real invoice, order confirmation, or account name attached — just a vague dollar figure and order number designed to sound official.
  6. The "Going / Maybe / Can't Go" buttons and unsubscribe links are genuine platform features, included specifically to make the email look authentic.

4. What To Do If You Receive This

  1. Do not call either phone number listed in the message.
  2. Do not click Going, Maybe, or Can't Go — interacting with the invite can confirm to the scammer that your email address is active.
  3. Do not click any links in the message, including "here" or "unsubscribe" links — use your email client's block/report tools instead.
  4. If you have an account with the platform the invite claims to be from (e.g., Facebook), manage your event/invitation settings directly through the platform's own app or website — not through the email.
  5. Report the message as phishing/spam through your email provider's report tool.
  6. If you're unsure whether a charge is legitimate, contact your bank or payment provider directly using the number on the back of your card or their official app/website — never a number provided in a suspicious message.

5. What To Do If You Already Responded

  1. If you called either number and provided personal or financial information (card number, bank details, one-time codes), contact your bank or card issuer immediately to flag possible fraud and consider a card replacement.
  2. If you clicked a link and were asked to log in anywhere, change that account's password immediately and enable multi-factor authentication if you haven't already.
  3. Keep an eye on your bank and card statements for unfamiliar charges over the next few billing cycles.
  4. If you're a SaveMyService Hosting customer and want help reducing similar messages, reach out to our support team about your spam filtering options.
  1. For more on general email scam tactics, see "Understanding Spam and Phishing Emails (Basics)".