Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Close the page and stop interacting with it. What you should do next depends on whether you only opened the link, entered a password or verification code, shared financial or identity information, or downloaded or installed anything. A click alone does not prove your account was taken over or your device infected—but an unexpected link can expose you to scammers even if you did not type sensitive information, the Federal Trade Commission (FTC) cautions in its September 2024 phishing alert.
First, stop interacting with the invitation
Close the webpage or browser tab. Do not follow the link again, reply to the invitation, or enter a password, passcode, payment details, or personal information. If a pop-up says your device is infected, urges you to call a phone number, or offers to install a cleanup app, do not follow its directions or pay for a repair. Scare messages can be part of a tech-support scam.
As an Amazon Associate I earn from qualifying purchases.
If the invitation claims that an account is locked, needs verification, or has a security problem, check by opening the provider’s known official app or typing its familiar website address yourself. Do not use the invitation’s link or contact information to verify the claim. Google likewise advises Gmail users not to enter a password after following a message link and to go directly to the service instead; its guidance also explains how to review security notifications through the account itself (Google Gmail Help).
Do not assume that receiving an unexpected calendar event means your account has been hacked. The important distinction is what happened after you saw it: whether you clicked, submitted information, approved a request, downloaded a file, or installed something.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Choose the response that matches what happened
Use the most serious applicable branch below. If you did more than one thing—for example, entered a password and downloaded a file—follow both relevant sets of steps. A security response should address the information or access that may actually have been exposed, rather than treating every click as proof of infection.
You clicked, but did not enter information or download or install anything
- Close the page and do not revisit it through the invitation.
- If it appeared to imitate an account provider, open that provider’s official app or site independently and review its security activity or alerts. Look for unfamiliar sign-ins or changes to account settings.
- Keep your browser, operating system, and other device software up to date. A password change or malware scan is not automatically required solely because you clicked; the FTC specifically recommends scanning when a link may have downloaded harmful software.
- If the account activity looks normal and you did not submit, approve, download, or install anything, continue to remove or report the invitation using the relevant provider’s tools.
A bare click is not proof that someone accessed an account or installed malware. Still, do not dismiss the possibility of exposure simply because you did not type anything: the FTC says opening an unexpected email or text link can expose a person to scammers. That is a reason to stop, verify independently, and assess what happened—not to trust a warning or “infection” claim made by the page.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
You entered a password, passcode, or one-time verification code
- Use the account provider’s known official app or website—not the invitation—to change or reset the affected password as soon as possible. If it was an Apple Account password, Apple Support specifically advises changing it immediately when it may have been entered on a scam website and ensuring two-factor authentication is enabled (Apple Support).
- If you reused that password anywhere else, change it on every affected service. Give each account a different, strong password; changing it only on the account named in the invitation leaves reused logins exposed elsewhere.
- Turn on multifactor authentication (MFA) where available. A security key is one possible additional factor, but check that the account and your devices support the key and authentication method before choosing one. It does not replace changing an exposed password or recovering an account.
- Review recent sign-ins, recovery details, connected apps or accounts, and other security settings. Remove changes you did not make and use the provider’s official recovery process if you cannot sign in or cannot secure the account.
- If you shared a one-time verification code, treat the account as at risk even if you did not provide a password. Contact the provider through its official recovery channel promptly; a code can authorize access or a change that a password reset alone may not resolve.
For a Microsoft account, Microsoft’s recovery guidance specifically calls out checking connected accounts, email forwarding, and automatic replies after suspected compromise, in addition to reviewing account security (Microsoft Support). These settings matter because an intruder may try to preserve access or misuse the account even after a password change.
Recommended Free Tools
Unexpected invitations can be designed to collect an email address and password or a special passcode. The FTC’s May 2026 alert describes fake “You’re invited” messages that impersonate invitation services or familiar hosts; a request for login credentials or a special passcode is not a normal way to accept an invitation. A compromised account may also be used to send the same scam to its contacts (FTC consumer alert, May 2026).
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
You entered card, bank, Social Security, or other identity information
- Payment card details: Contact the card issuer through the phone number printed on the card or its official app or website. Explain that the details were entered on a suspicious page and ask whether the card should be locked, replaced, or otherwise protected. Review statements for transactions you do not recognize.
- Bank-account information: Contact the bank through a known official channel promptly. Ask what protective steps are appropriate for the information disclosed, and monitor account activity for unfamiliar transfers or other transactions.
- Social Security or other identity information: In the United States, use IdentityTheft.gov for steps tailored to the information shared. The FTC’s phishing guidance directs people who gave out Social Security, card, or bank-account information to that service. If the incident is outside the United States, use the relevant local identity-theft or consumer-protection authority.
Do not call a number printed in the invitation or on the page that collected the information. Use the institution’s established contact route so you do not hand more information to the same scammer.
You downloaded a file, or installed or opened something
- If a file downloaded but you have not opened it, do not open it. Remove it using your device’s normal file-management tools if you can do so safely.
- If you opened a file, ran an installer, installed an app, or installed a configuration profile, update security software you already trust and run a scan. Follow that software’s instructions to remove anything it identifies. FTC guidance recommends updating security software, scanning, and removing detected threats when harmful software may have been downloaded (FTC phishing alert; FTC cybersecurity guidance).
- Do not install a tool or pay for a “repair” just because the suspicious page claims to have found an infection. If the device still behaves unusually or you cannot remove a detected threat, seek help from a trusted security professional using contact details found independently.
- If this is a work device or it connects to a work network, follow your organization’s IT or security reporting instructions promptly. Do not try to conceal the incident or use an unapproved cleanup tool.
Apple warns that unwanted profiles or software may control a device or steal data in some circumstances (Apple Support). The appropriate response depends on what was installed and on the device; a scan is not a substitute for reporting a work-device incident or securing any account whose password or code was also exposed.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Remove the calendar spam and report the message
Use the calendar or message provider’s official interface rather than links in the invitation. The removal steps vary by provider and device, so do not assume that a calendar event, an email message, and a calendar subscription are the same thing.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →- Apple Calendar or iCloud: Apple documents options to mark suspicious invitations as Junk and to delete a calendar you did not intend to subscribe to. Use the relevant option for what appeared; deleting an unwanted subscribed calendar is different from reporting an individual invitation as junk. Apple’s guidance covers these scam scenarios at Apple Support.
- Gmail message: To report a phishing email in Gmail, open the message, select More, then choose Report phishing. This reports the email; it does not by itself establish that a calendar event or subscription has been removed. Use the calendar provider’s own controls for that.
- Other calendar services: Find the service’s own help or reporting options through its official app or website. Remove an unwanted event or subscription using the available controls, and avoid replying to or otherwise engaging with the sender.
For U.S. reporting, the FTC lists [email protected] for suspicious email and SPAM (7726) for texts. Suspected fraud can also be reported at ReportFraud.ftc.gov. Apple says Apple impersonation emails can be forwarded to [email protected]. These routes are U.S.-oriented; elsewhere, use local reporting channels and the provider’s reporting tools. Reporting is separate from protecting an exposed account or payment method, so complete the recovery steps that match what you disclosed or installed.
Best Value
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
What a click does—and does not—tell you
A calendar invitation can be a delivery route for phishing: it may lead to a page that imitates an invitation service or a known person and asks for login details or a special code. The FTC’s May 2026 alert describes this credential-stealing pattern. The presence of an unsolicited event alone, however, does not establish that the calendar account itself was compromised. First determine whether you merely received an event, opened a link, submitted credentials or data, approved a request, or installed something.
Likewise, a page’s alarming pop-up is not reliable evidence that a device has a virus. Use trusted security software and official account-recovery routes, not the instructions or sales offer displayed by the suspicious page. If you only clicked, did not provide information, and nothing downloaded or installed, close the page and check any account the page claimed to represent through its official channel. If you disclosed information or installed software, use the corresponding recovery branch above.
The FTC’s advice is deliberately cautious: even opening a link can expose someone to scammers, but the needed response varies with what the link did and what the user did next. That distinction helps avoid two bad outcomes—ignoring a real credential or financial exposure, and treating every click as conclusive evidence of a hacked account or infected device.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
