--- title: "How Cybercriminals Can Add “Be Scammed” to Your Google Calendar - Blogs on IT Support and Cybersecurity for Small Business" description: "Here, we’ll review the basic experiences that this scam subjects a user to as it sets the trap… and, of course, what your business can do to avoid these threats.How Users Can Be ScammedPut yourself in the shoes of a targeted user for a moment: just l" url: "https://colemantechnologies.com/blog/how-cybercriminals-can-add-be-scammed-to-your-google-calendar" date: "2026-06-07T10:18:55+00:00" language: "en-GB" --- ## Blogs on IT Support and Cybersecurity for Small Business Insights on cybersecurity, AI, and IT strategy to help business leaders reduce risk, improve performance, and make better technology decisions. [ Categories ](https://colemantechnologies.com/blog/categories "Categories") [ Tags ](https://colemantechnologies.com/blog/tags "Tags") [ Categories: All Categories ](https://colemantechnologies.com/javascript:void(0); "Categories") Search...Suggested keywords [ x ](https://colemantechnologies.com/javascript:void(0);) # How Cybercriminals Can Add “Be Scammed” to Your Google Calendar [Coleman Technologies Blog](https://colemantechnologies.com/blog/categories/blog) [Security](https://colemantechnologies.com/blog/categories/security) [Coleman Technologies Admin](https://colemantechnologies.com/blog/blogger/darren-coleman) Friday, 25 October 2019 Here, we’ll review the basic experiences that this scam subjects a user to as it sets the trap… and, of course, what your business can do to avoid these threats. ## How Users Can Be Scammed Put yourself in the shoes of a targeted user for a moment: just like any other day, you access your Gmail account and discover what looks like a Google Calendar invite. The invite is apparently for some kind of company-wide meeting (probably to discuss the company’s trajectory, policy changes, or something like that) to take place at the end of the workday. The message includes a link to the complete agenda, which can be accessed once a user confirms their credentials. You do so… and in doing so, fall for a scam. This scam can be pretty safely categorized as “brilliant in its simplicity,” much like other [phishing](https://www.colemantechnologies.com/blog/how-not-to-teach-your-team-about-phishing-courtesy-of-godaddy/ "phishing") attacks can be nowadays. By using Google’s own convenience-based features, a fraudulent calendar event can be automatically added to a user’s Google Calendar, notifying the user. Fraudulent links send the user to a faked Google login page, where the user’s credentials are stolen as they attempt to log in. Alternatively, the link just begins installing malware directly to the targeted system. This scam has also proved effective against private users - informing them of some fabulous cash prize they’ve “won” through these fake Calendar entries. ## How the Scam Was Uncovered As it turns out, the details of this scam were reported to Google by an IT security firm in 2017, but Google has not made any steps to resolve it until recently. The firm stumbled upon this discovery when a coworker’s flight itinerary appeared in an employee’s Google Calendar. From there, the researcher realized the implications of this accidental discovery, and quickly determined that users just don’t anticipate phishing attacks to come in through their Calendar application. ## Can This Scam Be Stopped? Now that Google has acknowledged the issue, a fix is currently being developed as of this writing. Until the point that a successful fix is deployed, you need to make sure your users are protected against this vulnerability. The first thing they need to do is ensure that no Gmail events are automatically added to their Google Calendar. Under **Settings** in the Google Calendar application, they need to access their **Event settings**. From there, they need to **deselect** the option to **Automatically add events to my calendar** from their **Events from Gmail**. To disable invitations to events from automatically adding themselves to the Google Calendar, a user needs to go through the same process, this time switching the **Automatically add invitations** option to the much safer “**No, only show invitations to which I have responded**.” With any luck, this - combined with a little vigilance from your users - will protect your business from a phishing attack via its schedule. To learn more about how to protect your business against a variety of threats, subscribe to our blog, and give COMPANYNAME a call at PHONENUMBER. [ ](https://colemantechnologies.com/javascript:void(0);) [ ](https://colemantechnologies.com/javascript:void(0);) [ ](https://colemantechnologies.com/javascript:void(0);) Tags: [Email](https://colemantechnologies.com/blog/tags/email) [Phishing](https://colemantechnologies.com/blog/tags/phishing) [Security](https://colemantechnologies.com/blog/tags/security) [×](https://colemantechnologies.com/javascript:void(0);) Stay Informed When you subscribe to the blog, we will send you an e-mail when there are new updates on the site so you wouldn't miss them. Your Name E-mail Address [ 3 Business Communications Tools You Should Know ](https://colemantechnologies.com/newsletter-content/3-business-communications-tools-you-should-know) [ Bad Experience ](https://colemantechnologies.com/blog/bad-experience) About the author [ ![Coleman Technologies Admin](https://colemantechnologies.com/media/com_easyblog/images/avatars/author.png) ](https://colemantechnologies.com/blog/blogger/darren-coleman) [Coleman Technologies Admin](https://colemantechnologies.com/blog/blogger/darren-coleman) [ ](https://colemantechnologies.com/blog/blogger/darren-coleman) Author's recent posts [More posts from author](https://colemantechnologies.com/blog/blogger/darren-coleman) [ Tuesday, 05 May 2026 Darren Coleman Featured in Boss Today on AI Literacy and Human Judgment ](https://colemantechnologies.com/blog/darren-coleman-bosstoday-ai-literacy) [ Monday, 06 April 2026 How Cloud IT Services Are Transforming Business Continuity ](https://colemantechnologies.com/blog/how-cloud-it-services-are-transforming-business-continuity) [ Monday, 06 April 2026 Darren Coleman Featured in USAWire on Why Businesses Need an AI Strategy ](https://colemantechnologies.com/news-a-events/darren-coleman-usawire-ai-strategy) ## Schema ```json { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://colemantechnologies.com" }, { "@type": "ListItem", "position": 2, "name": "Blog", "item": "https://colemantechnologies.com/blog" }, { "@type": "ListItem", "position": 3, "name": "Coleman Technologies Admin", "item": "https://colemantechnologies.com/blog/blogger/darren-coleman" }, { "@type": "ListItem", "position": 4, "name": "How Cybercriminals Can Add “Be Scammed” to Your Google Calendar", "item": "https://colemantechnologies.com/blog/how-cybercriminals-can-add-be-scammed-to-your-google-calendar" } ] } ```