A calendar invitation can be a phishing message.
The invite may contain a link to a fake video meeting, an invoice, a shared document or a login page. It often uses the name of a company or person you recognise, and because it lands in the calendar rather than the inbox, people treat it with less suspicion.
Before opening anything in an unexpected invite
- Check the organiser's full email address, not just the display name.
- Confirm the meeting with the sender using contact details you already have, not the ones in the invite.
- Don't click the join link until you've done both.
Stop invites adding themselves
Review whether your calendar automatically adds invitations from unknown senders. Outlook and Google Calendar both have a setting for this. Report suspicious invitations through your email or calendar service so the filter learns.
If you'd like the safer setting applied across the practice, ask us.
Want a hand with this? Talk to us.