Pennsylvania Attorney General Dave Sunday is warning residents about a new email scam involving fake digital event invitations.

The scam targets recipients from compromised accounts belonging to friends or acquaintances, according to a press release from Sunday’s office.

The emails include invites to events like a conference or birthday party and often have a link prompting users to view the invitation.

Once clicked, the recipient is asked to log in or connect to an online account. Malware could then be downloaded onto the user’s device or the scammer could steal their email credentials, officials said.

Legitimate invitation platforms do not require users to sign in to view an invite, officials said. Users can spot the scams by verifying the invitation with the sender and hovering over the link to confirm it leads to a real website.

Those who think their email could be affected are encouraged to change their email password, enable two-step authentication for their account and report the email as a phishing attempt.

“Scammers are constantly evolving their tactics to appear more credible and trustworthy,” Sunday said in a statement. “If you receive an unexpected invitation that requires you to log in or provide personal information, take a moment to verify it directly with the sender – that extra step can protect your personal data and prevent serious harm.”

©2026 PG Publishing Co. Visit at post-gazette.com. Distributed by Tribune Content Agency, LLC.