Colorado victims warn of fake Evite, Paperless Post phishing scam after email accounts compromised

How it works

You receive an email that looks like an invitation from Evite or Paperless Post for an event like a graduation or family gathering. The email contains a link that takes you to a fake login page. When you enter your email and password, scammers capture your credentials and gain access to your real email account.

Red flags to watch for

• Email invitation from Evite or Paperless Post you did not expect
• Link in the email takes you to an unfamiliar-looking login page
• Sender address does not match the official company domain
• Urgent language pushing you to view or respond quickly
• You do not recognize the event or sender

What to do

Do not click links in unexpected invitation emails. Instead, go directly to Evite.com or PaperlessPost.com by typing the address in your browser yourself and logging in there to check for real invitations. If you already clicked the link and entered your password, change your email password immediately from a different device and enable two-factor authentication. Report the email to the FTC at reportfraud.ftc.gov and forward it to spam reporting services.