This security advisory warns about fraudulent calendar invitations from unknown senders, often impersonating Microsoft with subject lines mentioning payment confirmation or email service renewal.
For Outlook on the Web Users
- Access Settings → View all Outlook settings
- Navigate to Calendar → Events from email
- Disable “Automatically add events from email to my calendar”
For Outlook Desktop App Users
- Go to File → Options → Calendar
- Uncheck automatic meeting request acceptance and processing options
For Gmail / Google Workspace Accounts
- Adjust event settings to show “only invitations to which I have responded”
- Never click suspicious links in invites, particularly those referencing invoices or cryptocurrency
- Report and block spam senders using the three-dot menu
- Verify sender domains carefully — scammers use subtle variations like “outIook.com”
Key Recommendations
Delete unsolicited invites rather than declining them. Responding with “decline” sends confirmation to scammers that your address is active. Avoid clicking any links from unknown senders, as they frequently contain phishing attempts or malware.
If you have questions or need help adjusting your calendar settings, contact our team.