Prevent Scams and Phishing in Google Calendar

A knowledge base article about Prevent Scams and Phishing in Google Calendar provided by the UC Berkeley IT Service Hub - Knowledge Portal

Table of Contents

Your calendar should work for you - not for scammers. Learn how to spot, report, and block unwanted calendar invites while keeping your schedule safe and clutter-free. 

Understanding Your Settings

By default, Google Calendar automatically adds invitations “Only if the sender is known”, which includes people in your contacts, within UC Berkeley, and those you’ve already interacted with. This default helps reduce phishing attempts.

If an event isn’t added to your calendar, you will get an invitation email. After you mark a sender as known or you interact with them, future invitations from that sender are automatically added to your calendar.

Note: Within an individual calendar’s settings, you may notice that this default invitation setting affects notifications for new events as well, which are uneditable and default set to “Automatic”. 

 

Responding to a Scam Invite

If you receive a suspicious calendar event (e.g. Bitcoin scams, fake invoices, strange Zoom links):

Reporting Events in Google Calendar

1. Open the event in the Google Calendar. 

Image: How to get to Settings of the Event invite from Google Calendar

 

2. Click the three vertical dots (More actions) in the top-right corner of the event detail block.

3. Select Report as spam.  

Image: Shows two steps to get to More actions in order to Report as spam

 

4. You will be prompted to confirm and (optionally) block future invitations from that sender. 

Image: Shows the prompt after you select Report as spam with optional selection to block future invitations from that sender

This both removes the event and helps Google improve its detection of malicious invites. When you report an event, the event is removed from your calendar. If the event recurs, all events in the series are removed.

Additional Resources

Read more from Google Support: