Watch Out for Phishing Emails Disguised as Apple iCloud Calendar Invites

Scammers are sneaking fake messages into Apple iCloud Calendar invites. These invites often appear from noreply@email.apple.com, which makes them look trustworthy and allows them to bypass spam filters.

The invite usually claims there’s a large PayPal charge you didn’t make and urges you to call a number to dispute it. That “support line” actually connects you to a scammer, who may pressure you to share personal information or install remote access software that gives them control of your device, opening the door to identity theft, stolen finances, and malware.
‍

How This Scam Works

• A calendar invite appears in your inbox, showing it’s from noreply@email.apple.com.
  
  
• Inside the calendar invite in the Notes section, the scammer places a fake note that looks like a real Apple notification. It usually says you were charged by PayPal and need to call right away.
  
  
• The message includes a phone number to “contact support.” Calling that number connects you to fraudsters.
  
  
• The next step is typically to ask the victim to download remote access software, under the guise of issuing a refund or securing the account.
  
  
• What really happens is the scammer gains access to your device, allowing them to grab your financial information, install malicious programs, or copy your personal data without you knowing.

How to protect yourself

• Treat surprise calendar invites with caution. If you didn’t expect it, ignore or delete it. Legit companies rarely send urgent payment disputes through calendar invites.
  
  
• Don’t call numbers in messages or invites. Instead, go directly to the official Apple or PayPal website or app and use the contact info there.
  
  
• Verify independently. Log into your accounts (PayPal, bank, Apple) directly to confirm any suspicious activity.
  
  
• Take your time. Scammers rely on panic—pause and think before you act.
  
  
• Keep device security updated. Updated software and a good antivirus can reduce the risk of malware if you accidentally click something.

How Carefull Can Help

Scams like this are tricky because they look like they’re coming from trusted sources, in this case Apple. That’s why Carefull builds in multiple layers of protection:

• ScamCheck helps you quickly verify suspicious messages, calendar invites, or emails before you click or call.
  
  
• Password & Identity Monitoring alerts you if your passwords or personal details have been exposed in a breach, so you can take action before scammers use them.
  
  
• Carefull’s Resource Hub helps you stay ahead of evolving threats, including tips like using a password manager to keep your accounts safe with strong, unique logins.
  
  

Try Carefull free for 30 days and see how easy it is to protect your family and your finances.