October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk13 min

How to Report Phishing and Scam Calendar Invitations

Report suspicious calendar invitations through the service that received them, then escalate email, text, credential, malware, or fraud incidents through the correct US channel.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Do not open the invitation, follow its links, RSVP through an unfamiliar page, or enter a password or one-time code. First report the event in the calendar service that received it; then report the associated email or text through the appropriate consumer-protection or cybercrime channel. Reporting options differ for Google Calendar, iCloud, Outlook, and subscribed spam calendars, and a calendar-service report does not replace an incident report when credentials, money, personal information, or a device may be at risk.

What to do in the first five minutes

  1. Leave the invitation untouched. Do not click links, open attachments, accept or decline through a suspicious page, scan a QR code, or type an email password or one-time passcode to “view” the event.
  2. Check the source without interacting with the content. Look at the account or calendar in which the event appeared and, if visible, the sender address and service that generated it. A calendar item created by a third-party app may not be reportable through the calendar provider’s own control.
  3. Distinguish the event from the lure. An unexpected “You’re invited” email or text is an invitation-themed phishing message. A calendar entry that appears automatically is a calendar-service abuse problem. You may need to report both, but they are not the same submission.
  4. Verify only through a trusted, separate channel. If the invitation could be real, contact the purported host using a phone number, address, or existing conversation you already trust—not details supplied in the invitation.
  5. Use the provider’s report or junk control. This can remove the event and help the provider block similar abuse.
  6. Escalate according to what happened. A suspicious event with no interaction is usually a provider-and-message report. Disclosed credentials, identity information, money loss, or possible malware require additional action.

The FBI’s Oregon FBI Tech Tuesday calendar-fraud guidance states: “Report calendar phishing attempts to the calendar service you use.” That is the starting point, not necessarily the only report you should make.

As an Amazon Associate I earn from qualifying purchases.

Identify where the invitation came from

Before choosing a reporting route, determine whether the item was generated by Google Calendar, Apple iCloud, Outlook, another calendar application, or a calendar you subscribed to accidentally. Look at the account name and the event’s organizer information without opening attachments or following links. If the event was created by another provider or app, a button in your usual calendar may only delete it locally; use the originating service’s abuse control as well.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

An invitation can arrive through more than one channel. A scammer might send an email containing a calendar file, cause an event to be added automatically, or send a text directing you to a fake invitation page. Report the calendar object to the calendar provider and report the email or text through the matching message route. Forwarding an email to an abuse address does not automatically remove an event that exists only inside a calendar account.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

Report a Google Calendar event

Use the event’s Report as spam control

On a computer, open Google Calendar, select the suspicious event, choose More actions, and select Report as spam. Google says this control applies to events sent from Google Calendar. Events created by another provider, app, or service cannot be submitted through this Google control.

Google says reporting removes the event. If it is part of a recurring series, the entire series is removed, so check that the event is genuinely unwanted before confirming. Removal from your calendar does not mean a link was safe to open; avoid interacting with the event before reporting it.

Prevent automatic additions from unknown senders

To reduce future surprises, open Settings → General → Event settings → Add invitations to my calendar and choose Only if the sender is known. Google describes “known” senders as people in your contacts, people in your organization, or people with whom you have interacted. Google warns that this choice might reveal to senders that they are not in your contacts. It limits automatic additions; it is not a substitute for reporting an abusive event that already arrived.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use the setting as a screening measure, not proof that an invitation is genuine. A compromised contact or organizational account may still send a malicious event. If a legitimate meeting fails to appear automatically after changing the setting, confirm it with the organizer through a trusted channel rather than loosening the setting for an unfamiliar message.

Report an Apple Calendar or iCloud invitation

Mark an unwanted invitation as Junk

Apple’s iCloud support instructions provide a Junk reporting option for suspicious or unwanted calendar invitations received in Mail or Calendar. Open the invitation in the Apple app or iCloud interface, use the available invitation actions, and choose Junk rather than responding to the sender.

The cited Apple instructions are from the Singapore English support site. Wording, button placement, and availability can vary by country, device, app version, and account configuration. If you do not see a Junk action, do not click the invitation’s content; use the service’s current help controls or report the associated message from Mail.

Remove a subscribed spam calendar

If the unwanted entries come from a calendar you accidentally subscribed to, remove the subscription instead of handling events one by one. In Calendar, identify the unfamiliar subscribed calendar, open its calendar details, and choose the delete or unsubscribe action available on your device. Deleting a subscribed calendar removes its events from your view; it does not indicate that every message connected with it has been reported to a national authority.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

Take care not to delete a shared family, work, or school calendar by mistake. Check the calendar name and owner first. If you are uncertain, hide it temporarily and ask the owner through a known contact method before removing it.

Report an Outlook message or calendar item

Outlook on the web

For an invitation delivered as an email in Outlook.com, open the message and choose Report → Report phishing. These instructions concern the message. They should not be treated as a universal calendar-item procedure for every Outlook client.

Outlook for Android and iOS

In the Outlook mobile app, select the email, tap the three-dot menu, choose Report Junk, and then select the appropriate option: Junk, Phishing, or Block Sender. Select Phishing when the message is attempting to steal credentials or direct you to a fraudulent site. These controls report the email that carried the invitation; the calendar event itself may require a separate action.

When classic Outlook has no calendar Report button

Microsoft’s known-issue notice, last updated January 7, 2026, recorded that classic Outlook had lacked a Report button for calendar items. Microsoft said the issue was fixed for Microsoft 365 subscription builds beginning with:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Channel Build identified by Microsoft
Beta Version 2512, build 19524.15010
Current Channel Preview Version 2512, build 19530.20000
Current Channel Version 2512, build 19530.20000

Microsoft said the fix would move to other Office channels as they receive build 19530.20000 or later. If the calendar-item report action is missing, check File → Office Account (or the equivalent account/about screen in your client) for the product, update channel, and build, then check whether an update is available. Do not assume that a missing button means the event is legitimate. For a work or school account, forward the details to your organization’s security or IT team as well.

Outlook behavior can also differ between a personal Outlook.com account, a Microsoft 365 subscription, a managed desktop installation, and a mobile app. Record which product and build you used when reporting. That detail helps support staff reproduce a missing control and prevents you from treating instructions for one client as universal.

Choose the right secondary report route

Provider reporting handles the event or message at the service level. Use a second route when the invitation was delivered by email or text, or when the incident caused harm. The following options are US-specific.

Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
What you received or what happened Additional US report Important limitation
Phishing email, including an invitation-themed email Forward it to [email protected] and report the attempt at ReportFraud.ftc.gov. Forwarding the email does not submit a calendar event that exists only inside a calendar service.
Phishing text message Forward the text to 7726 (SPAM), then report it at ReportFraud.ftc.gov. Do not reply to the scammer or use a link in the text.
Spoofing, phishing, or cyber-fraud victimization Submit a report to the FBI’s Internet Crime Complaint Center (IC3). Victims can also contact a local FBI office. IC3 is an incident-reporting route; it does not replace the calendar provider’s abuse controls.
Unsure which US agency applies Use the USAGov report-a-scam guide, which asks where the incident occurred, its category, and additional details. These routes are for the United States; other countries use different authorities.

The FTC’s invitation alert addresses fake party-invitation emails and texts that request email credentials or passcodes. Pair its forwarding instructions with the relevant calendar-service report rather than assuming that an email or text report removes an event from your calendar.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For readers outside the United States, start with the provider’s local abuse or help page and your national cybercrime or consumer-protection authority. The agencies listed above are not a worldwide reporting directory, and eligibility or intake rules can differ by country.

What to do if you clicked, replied, or supplied information

You entered an email password or one-time code

Change the affected email password promptly, using a long, unique passphrase that is not reused elsewhere. Review account recovery details, active sessions, forwarding rules, and connected applications for changes you did not make. If the same password protected other accounts, change those too. A one-time code can enable an attacker even when the password itself was not disclosed, so treat a surrendered code as a compromise.

When changing the password, type the provider’s address yourself or use an existing bookmark rather than a link in the invitation. Tell your organization’s security team immediately if the account is managed by an employer or school; administrators may need to revoke sessions or investigate related accounts.

You lost personal information or money

Use IdentityTheft.gov for tailored recovery steps when personal information was lost. Contact your bank or payment provider through a number or website you already know is genuine if money or payment details were involved. Preserve the invitation, sender information, dates, and transaction records for the service provider and law-enforcement reports.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A link or attachment may have installed malware

Update the security software already installed on the device, run a scan, and remove anything the scan detects. The FTC recommends these steps; a scan is not a guarantee that every compromise has been found. If the device shows continuing suspicious behavior, disconnect it from sensitive accounts and obtain professional incident-response help.

Consumer, workplace, and government reporting paths

Individual US consumers

For a personal account, report the event in Google Calendar, iCloud, or Outlook first. Add APWG, 7726, the FTC, or IC3 according to whether the lure was email, text, or cyber fraud and whether you suffered a loss. Keep copies or screenshots only if they can be saved safely without opening the malicious content.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

Work and school accounts

Use the organization’s built-in reporting feature and notify the security team or help desk. Administrators may need message headers, the event’s sender, the time received, and the affected accounts to search for related attempts. Do not forward a dangerous attachment outside approved internal procedures.

Follow your organization’s evidence-handling rules. Some security teams prefer the original message or full headers, while others provide a reporting add-in that preserves them automatically. Do not create a new invitation or reply merely to test whether the sender is real.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Organizations and public-sector entities

A joint advisory from CISA, the NSA, the FBI, and MS-ISAC recommends built-in reporting in Outlook and other cloud email platforms and direct spam reporting to Microsoft, Apple, or Google as applicable. Organizations can contact CISA at [email protected] and use its 24/7 response line. Spoofing, phishing, or victimization can also be reported to IC3 or a local FBI field office. State, local, tribal, and territorial entities have a separate MS-ISAC reporting channel. These organizational routes are not necessary for an ordinary consumer’s unwanted event.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How to preserve evidence without spreading the scam

  • Record the calendar provider, account, event title, sender address, date, recurrence pattern, and the exact report option you used.
  • Save a screenshot that excludes sensitive information when possible. Do not open an attachment merely to capture it.
  • For email, retain the original message and headers if your provider allows it; do not alter the message before your organization’s security team advises you.
  • Note whether you clicked, entered credentials, supplied a code, downloaded a file, or lost money. Accurate timelines help providers and investigators distinguish spam from account compromise.
  • Store records in a location that other people cannot accidentally access, especially if the invitation contains personal or workplace information.

Common mistakes and their fixes

Mistake Why it causes trouble Safer response
RSVPing to “cancel” the event It confirms that your address is active and may open a malicious site. Use the provider’s report or junk control without responding.
Using the phone number or link in the invitation to verify it The scammer controls those details. Contact the host through an existing, independently verified channel.
Assuming deletion equals reporting Deleting an event may remove it only from your view and provide no abuse signal. Choose Report as spam, Junk, or Phishing when available; then delete if needed.
Using a message-reporting route for a calendar-only event APWG, 7726, and FTC reports concern email or text and may not reach the calendar provider. Report the event in its originating calendar service first.
Applying US agencies to a non-US incident US reporting bodies may not accept or route foreign cases. Use your provider’s local support and your country’s cybercrime or consumer-protection authority.
Assuming a familiar logo proves authenticity Invitation messages can copy branding, names, and formatting from real services. Inspect the actual sender and verify independently without using supplied links.
Forwarding a dangerous attachment widely You can expose coworkers, family, or support staff to the same payload. Use the provider’s report control or your organization’s approved secure submission process.

How to decide whether one report is enough

Use a provider-only report when an unsolicited event appeared, you did not interact with it, and there is no sign of account or financial harm. Add the email or text route when the lure arrived through those channels. Add FTC, IC3, IdentityTheft.gov, your bank, or your organization’s security team when the incident involves credentials, personal information, money, malware, or a managed account. No single route automatically replaces the others because each organization controls a different part of the incident.

Think of the options by item type and severity: a calendar control handles the event; APWG or 7726 handles the delivery message; FTC or USAGov provides consumer reporting; IC3 handles a cybercrime complaint; and an employer’s security team handles a managed account. The more serious the outcome, the more important it is to preserve a timeline and make each applicable report promptly.

Availability and regional qualifications

Button names and locations change with locale, device, account type, and software build. Apple’s cited instructions use the Singapore English support site. Microsoft’s calendar fix is build- and channel-specific rather than a universal Outlook procedure. Google’s automatic-invitation setting can disclose to senders that they are not in your contacts. The US government routes described here are not a worldwide list; readers elsewhere should consult the calendar provider’s local help and the relevant national authority.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Frequently Asked Questions

Can I report a calendar event if it was created by another app?

Google’s Report as spam control applies only to events sent from Google Calendar. An event created by another provider, app, or service must be reported through that originating service or its associated message controls.

What if Outlook has no Report button on the calendar item?

Check the Outlook product, update channel, and build. Microsoft’s January 7, 2026 known-issue notice identifies fixes beginning with specific Microsoft 365 subscription builds; managed work or school users should also report the event to their security team.

Are APWG, 7726, and the FTC substitutes for reporting the calendar event?

No. APWG and the FTC handle phishing email reports, while 7726 handles phishing texts. Report the calendar event in its provider first, then use the additional route that matches how the lure arrived and what harm occurred.

What should I do with a calendar I accidentally subscribed to?

Identify the unfamiliar subscribed calendar and use the delete or unsubscribe control in your calendar app. This removes its entries from your view, but you should still report any associated invitation or message through the originating service.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Should I report an invitation that I only deleted?

Yes, if a Report as spam, Junk, or Phishing control is available. Deletion alone may only remove the item from your calendar and may not send an abuse signal to the provider.

What if I entered a password or one-time code?

Change the affected email password promptly, change reused passwords, and notify your organization if it is a work or school account. A surrendered one-time code can be enough to enable an attacker, even if the password was not disclosed.

Are the listed government reporting routes available outside the United States?

The FTC, IC3, 7726, and USAGov paths described here are US routes. Elsewhere, use the calendar provider’s local support and your country’s cybercrime or consumer-protection authority.

The Bottom Line

Report the suspicious item to the calendar service that created it, then report the email or text and any resulting harm through the route that matches the incident. Do not click, reply, or provide credentials while deciding what to do.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.