A man in Westlake, Ohio, did everything he was supposed to do when a suspicious party invitation showed up in his inbox — and the scammers still nearly fooled him.
John, who lives in Westlake, Cuyahoga County, received what looked like an Evite for a “Dinner Gathering & Celebration” from a friend. Rather than click the “View Invitation” button, he emailed his friend directly to ask if it was real. He got a reply: “Hi John. This is from me, and I sent it, Sorry for the confusion, Thank you.”
That should have settled it. Instead, something about the phrasing bothered him. The punctuation was off and the reply didn’t sound like his friend. John followed up again — and this time confirmed directly with his friend that the entire exchange, including the reply that claimed to vouch for the invitation, was part of a scam.
The weak link: a hacked inbox answering for you
The case exposes a gap in standard advice to “just verify with the sender.” If a scammer has already compromised that person’s email account, the scammer can be the one answering your verification email — and telling you everything is fine.
The Federal Trade Commission warned in May 2026 about fake invitations impersonating services like Evite and Paperless Post. These messages can come from an email address you actually recognize because the account itself has been taken over. Victims who click through may be prompted to enter their email password or a verification code, handing criminals the keys to send more fraudulent invites to the real contact list.
It remains unclear exactly how John’s friend’s account produced the reassuring reply — whether through an automated Gmail rule, a template, or someone typing it manually while impersonating the account owner. What’s confirmed is that the reply existed, sounded plausible, and was wrong.
What Evite says
Evite told the CyberGuy column it isn’t seeing a surge in phishing scams but said vigilance matters. A company statement noted that real invitations today tend to be loaded with specifics:
“Real hosts are over-communicating, sharing everything from parking instructions and dress codes to very specific themes like ‘Strawberry’ or ‘Western.’ That level of detail is what makes a modern invite harder to fake and gives guests the confidence to say ‘yes’ without second-guessing.” Evite added: “If it just says ‘You’re invited’ with a link, be cautious.”
That guidance is useful but not foolproof — scammers can and do fabricate specific-sounding details.
How to actually verify an invitation
- Don’t trust a reply to a suspicious email as proof of anything. Call the person using a phone number you already had saved — never a number listed in the invitation itself.
- Never enter your email password or a security code to
