Story perspectives

Scammers Use Fake Evite, Punchbowl Invites, $21B Losses

5/1/2026

41 5

Summary

Story summary

Evite, Punchbowl and Paperless Post warned that scammers are using fake invitations for phishing.
The emails spoof sender addresses, use misspelled URLs, and include vague event details or RSVP prompts.
Recipients should verify domains, avoid invitation links, run antivirus scans, change passwords and enable two-factor authentication.
Victims must mark messages as phishing and report them to the platform, the FTC and the FBI’s IC3, noting $21 billion losses in 2025.

History

Historical Context

In 2004, the FBI launched Operation Phish Phry, dismantling a global phishing ring that stole millions from online users. The investigation, coordinated with the FTC, Microsoft, eBay, and PayPal, led to 1,400 arrests and recovered $1.2 billion in fraudulent transfers. Today's fake invitation scams on platforms like Evite, Punchbowl, and Paperless Post echo those early phishing tactics, exploiting spoofed domains and RSVP prompts. The legacy of 2004’s crackdown underscores the need for robust two-factor authentication, domain verification, and coordinated reporting to agencies such as the FBI’s IC3.

1 of 2

Story summary

Evite, Punchbowl and Paperless Post warned that scammers are using fake invitations for phishing.
The emails spoof sender addresses, use misspelled URLs, and include vague event details or RSVP prompts.
Recipients should verify domains, avoid invitation links, run antivirus scans, change passwords and enable two-factor authentication.
Victims must mark messages as phishing and report them to the platform, the FTC and the FBI’s IC3, noting $21 billion losses in 2025.

1 / 2