iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Close the page and stop interacting with it. A click alone does not prove that your account or device was compromised, but the correct response depends on what happened next. Do not enter credentials, download a file, approve an app, or call a number shown in a pop-up. Then use the branch below that matches your exposure.
First, work out what the click actually did
Calendar-invite scams can lead to a fake sign-in page, a consent screen for a third-party app, a malware download, or a payment and identity-theft form. These are different incidents and require different fixes. A page view is not the same as submitting a password, granting an OAuth permission, or running a downloaded file.
| What happened | Priority response | What the response addresses |
|---|---|---|
| You opened the page but entered nothing | Close it, check downloads, and report or delete the invite | Stops further interaction and catches a possible download |
| You entered a password or verification code | Change the password from the genuine service, enable MFA, and review sessions | Protects an account whose credentials may be exposed |
| You approved an app or permission request | Remove the unfamiliar app or grant from security settings | Revokes a token that may survive a password change |
| You downloaded or opened a file, or the device behaves strangely | Stop signing in on that device, update trusted security software, and scan | Limits possible malware spread and detects malicious software |
| You entered payment or identity details | Call the bank or card issuer through a verified number and use IdentityTheft.gov for identity data | Limits financial loss and starts identity-theft recovery |
If you only opened the link
Close the page without interacting
Close the browser tab or window. Do not click buttons such as “verify,” “join meeting,” “download,” or “continue,” even if the page claims that your account is locked. Do not type a password, one-time code, phone number, card number, or other information into the page. Never call a support number displayed in a pop-up; scammers use those numbers to direct victims to remote-access tools or fake “security” fixes.
Check whether anything downloaded
Look at the browser’s downloads list and your normal Downloads folder. If a file appeared, do not open it. If you are unsure whether it is safe, leave it untouched until trusted security software or your IT department can examine it. A download by itself does not establish that malware ran, but it changes the incident from a page view to a potential file exposure.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Remove and report the invitation
Use the calendar or mail service’s built-in phishing, junk, or report controls. Delete the event after preserving any details needed for reporting. Apple says suspicious or unwanted invitations in iCloud Mail or Calendar can be marked as Junk. If you accidentally subscribed to a spam calendar, delete that calendar rather than continuing to dismiss individual events. Other providers use different menu names, so follow the instructions for the provider you actually use.
If you entered a password or verification code
Change the exposed password from a known-good location
Open the service’s genuine website or official app by typing its address yourself or using a trusted bookmark. Do not use the link from the invitation or a search advertisement that could lead to another imitation page. Change the exposed password immediately. If you reused that password anywhere else, change it on every reused account, starting with email and accounts that can reset other passwords.
Turn on multifactor authentication
Enable MFA in the account’s security settings. The FTC advises changing passwords and enabling two-factor authentication when malware or phishing may have exposed account access. An authenticator app or hardware security key can provide stronger protection than a password alone; CISA describes security keys as an MFA method. MFA does not undo a password disclosure, so complete the password change first.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Look for persistence and unauthorized changes
- Review recent sign-ins, active sessions, and devices, and sign out of sessions you do not recognize.
- Check recovery email addresses and phone numbers for changes.
- Inspect mail-forwarding rules, filters, automatic replies, and delegated access. Attackers may use these to hide password-reset messages.
- Review sent mail, deleted mail, cloud files, and other activity for actions you did not take.
If the account belongs to your employer or is used on a work device, notify IT immediately. Microsoft’s enterprise guidance tells work users to contact an administrator, change associated passwords, report the message, and use the organization’s process for financial fraud or other incidents.
If you approved an app or permission request
Revoke the grant in account security settings
Open the account’s genuine security or connected-apps page and remove the unfamiliar application, consent grant, or session. Look for entries created around the time of the invitation and for permissions involving mail, files, contacts, calendars, or account management. If you cannot identify the entry, ask your administrator or the service’s official support team before approving anything else.
Why a password change is not enough
An OAuth approval can issue an access token to an application. The FBI Internet Crime Complaint Center’s September 2026 alert explains that an approved token may preserve access even after a password is changed; immediate removal of the app through the user’s security settings is necessary for remediation. Change the password and enable MFA as well, but do not treat those steps as a substitute for revoking the grant.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Escalate workplace approvals
For a work account, tell IT exactly which app was approved, which permissions were shown, and when. Administrators may need to revoke tokens centrally, inspect audit logs, reset sessions, and check whether the same consent was granted to other users.
Recommended Free Tools
If you downloaded or opened a file, or the device acts strangely
Stop using the device for sensitive sign-ins
Do not enter banking, email, password-manager, or work credentials on a device that may be infected. If it is a company computer or phone, contact IT and follow its containment procedure. FTC business guidance recommends disconnecting a malware-infected computer from the network; follow your organization’s instructions about whether to unplug, disable Wi-Fi, or leave the device connected for remote investigation.
Update and scan with trusted tools
From a trusted source, update your operating system and reputable security software, then run a full scan. The FTC recommends updated security software and a scan when malware may have been downloaded. If the scan reports a threat, follow the tool’s removal instructions and restart when requested. Do not install a “cleanup” program promoted by the suspicious page or by an unsolicited caller.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Get qualified help when symptoms continue
Warning signs include unexpected pop-ups, browser redirects, disabled security settings, unknown programs, unusual battery or network activity, files being encrypted, or account activity that continues after password changes. Ask the device maker, your organization’s IT team, or a technician you trust for help. Keep the suspicious invitation, filename, screenshots, and approximate times available for the investigation.
If you entered payment or identity information
Bank and card details
Call the bank or card issuer using the number printed on your card, shown in the official banking app, or listed on a statement. Explain that the details were entered into a suspected phishing page. Ask whether the card or account should be blocked or replaced, and review transactions for unauthorized charges. Report any fraudulent transaction through the institution’s official process.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Government identifiers and other identity data
If you submitted a Social Security number or other identity information, use IdentityTheft.gov for recovery steps matched to the information exposed. Keep a record of when and where you submitted it, which accounts were involved, and any confirmation numbers from reports. Do not send additional identity documents to someone who contacts you through the suspicious invitation.
Best Value
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
Report the invitation and preserve evidence
Use the provider’s reporting control
Mark the message or event as phishing or junk through your mail or calendar provider. Preserve screenshots of the invite, sender address, event title, destination domain, permission screen, downloaded filename, and timestamps before deleting anything that may be needed for an investigation.
Report broader fraud
The FTC accepts phishing reports through its consumer reporting channels and recommends forwarding phishing email to the Anti-Phishing Working Group. For incidents covered by the FBI Internet Crime Complaint Center’s September 2026 consent-phishing alert, contact relevant security officials and report to IC3 or a local FBI field office. Workplace incidents should also be reported through the employer’s security process.
What to check after the immediate response
- Account access: recent sign-ins, active sessions, recovery methods, forwarding rules, and sent messages.
- Connected applications: unfamiliar OAuth apps, delegated access, API keys, and permissions created near the click.
- Device state: downloads, newly installed software, browser extensions, security alerts, and unusual behavior.
- Financial activity: card authorizations, bank transfers, payment-wallet activity, and account-contact changes.
- Work exposure: shared files, corporate email, VPN sessions, and any other systems reachable from the affected account.
Continue watching the relevant accounts for unexpected sign-ins or messages. Keep MFA enabled and respond to alerts through the service’s official app or website, not through links in follow-up messages.
Free tools Windows power users keep installed
One-click scans. No signup required.
Common mistakes to avoid
- Assuming that every click means the device is infected. A click alone does not establish malware or account takeover.
- Changing a password but leaving an unfamiliar app authorization active.
- Using the suspicious page’s “support” number or installing its recommended security tool.
- Continuing to use a potentially infected work device without telling IT.
- Deleting all evidence before recording the sender, URL, permissions, filename, and time.
- Entering more information to “cancel” an event or claim a refund.
A practical incident checklist
- Close the invitation link and stop entering information.
- Identify whether you only viewed the page, submitted credentials, approved an app, downloaded a file, or entered financial or identity data.
- For credentials, change the password at the genuine service, change reused passwords, enable MFA, and review sessions and recovery settings.
- For app consent, remove the app or grant from connected-app security settings; ask IT to revoke tokens for a work account.
- For a file or device symptoms, stop sensitive sign-ins, involve IT when applicable, update trusted security software, and scan.
- For payment or identity data, contact the institution through a verified channel and use IdentityTheft.gov when appropriate.
- Report the invite, preserve evidence, and monitor the affected accounts.
How to reduce the impact of the next suspicious invite
Keep MFA enabled on email, calendar, banking, and work accounts. A FIDO2 security key is one MFA option, but it does not clean malware, revoke an OAuth grant, or reverse information already disclosed. Treat unexpected calendar events like unsolicited email: verify the organizer through a separate known contact method, inspect the destination domain, and open the meeting service from its official app instead of the event’s link when possible. Keep operating systems, browsers, and security software updated, and make sure you know how to report phishing in the mail and calendar services you use.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
