It’s a sinking feeling when you open your iPhone calendar and find it cluttered with terrifying alerts about bank risks or hacked accounts.
It’s not usually a virus in the traditional sense, but a clever hijacking trick where scammers use pop-up ads or dodgy links to subscribe you to a rogue calendar without you even noticing. These fake events are designed to bypass Apple’s usual security filters and land directly in your notifications, hoping you’ll panic and click a phishing link. The good news is that it’s easy to reclaim your schedule once you know where to look in your settings.
What is the iPhone calendar scam?
It’s a phishing method that works by sending fake event invites directly to your phone’s calendar app. Unlike most scams, it doesn’t need you to download anything or click a suspicious link to get in. The invites just appear, often with alarming titles designed to make you react before you think. Things like “payment overdue” or “your device has been compromised” are common examples, though the wording changes regularly as scammers adapt to stay ahead.
Once they’re in your calendar, they can be surprisingly hard to get out. Some come back even after you delete them, and because they trigger notifications just like real events do, they’re easy to mistake for something genuine at a glance. That split second of confusion is exactly what scammers are counting on.
Why your calendar is surprisingly easy to exploit
Apple has strict controls around what apps can do on your iPhone, but calendar invites have historically been able to slip through without going anywhere near the App Store. That means scammers can get alerts showing up directly in your notifications without needing to install a single thing on your device.
It’s a clever workaround, and it’s part of why this particular method has been growing. Cybersecurity company Malwarebytes flagged the rise of fake calendar invites back in late 2024, and the problem has continued to increase since then. Apple itself now lists unwanted calendar invitations among the phishing attempts users should be aware of. The fact that it bypasses so many of the usual security layers makes it more effective than a lot of more complicated scam methods.
What scammers actually want
The invite itself isn’t the end goal—that’s just the way in. The real aim is to get you to either tap a link or call a phone number included in the event. Once you do that, the scam can go in several directions. Some will take you to a fake website designed to harvest your banking details or login credentials. Others connect you to someone posing as a support agent who’ll try to sell you an unnecessary service or talk you into handing over personal information.
In some cases, they’ll attempt to get you to install software that gives them access to your accounts in the background. The invite just gets the panic started. Everything else follows from there. Whatever the specific approach, the goal is almost always financial. It’s worth remembering that no genuine company will ever contact you through a calendar invite to tell you there’s a problem with your account or a payment due.
How to spot one before it causes any trouble
The most obvious sign is an unexpected calendar event from someone you don’t know, especially one with an urgent or alarming title. Legitimate businesses and services don’t send unsolicited calendar invites, so anything that arrives out of nowhere should be treated with suspicion straight away.
Look out for events that include phone numbers, links, or requests for any kind of personal information. Real calendar invites from actual contacts or organisations you’ve signed up with won’t ask you to call a number or verify your details via a link embedded in an event title. They also won’t have countdown-style urgency built into them, which is a very common tactic used to make you act fast without stopping to think.
If something looks off, trust that instinct. Apple’s own guidance suggests that if you’re uncertain about any unexpected message or request, it’s safer to assume it’s a scam rather than engage with it. If it appears to come from a company you use, contact that company directly through their official website rather than through anything in the invite itself.
How to delete a scam calendar invite on a recent iPhone
If you’re running iOS 14.6 or later, the process is fairly simple. Open the Calendar app and tap on the suspicious event. Scroll to the bottom of the event details, and you should see an option that says “unsubscribe from this Calendar”. Tap that, then confirm by tapping “unsubscribe” when prompted.
This removes the entire subscribed calendar rather than just the single event, which is important because deleting one event at a time often doesn’t work. The invites tend to keep coming back unless you remove the subscription at the source. It can feel like whack-a-mole if you try to handle them individually, so going straight for the calendar itself is always the better move.
How to delete a scam calendar invite on an older iPhone
If your phone is running an earlier version of iOS, the steps are slightly different. Open the Calendar app and tap “Calendars” along the bottom of the screen. Find any calendar you don’t recognise, tap the small info button next to it, scroll down and select “Delete Calendar”. That should remove it entirely.
It’s worth going through all the calendars listed in that view, not just the obvious ones. Scam subscriptions don’t always have suspicious names, so anything unfamiliar is worth removing, even if it looks fairly innocuous at first glance.
What to do if the invites keep coming back
If deleting the calendar through the app doesn’t do the trick, you can try removing it through your settings instead. Go to Settings, then tap Calendar, followed by Accounts. If you’re on iOS 13, the path is slightly different: go to Passwords and Accounts and then Accounts from there.
Look for a section called Subscribed Calendars. Any calendars listed there that you don’t recognise should be tapped and then deleted by selecting “delete account” at the bottom. This cuts the connection at the account level rather than just within the app, which tends to be more effective when the invite keeps reappearing.
How to stop them arriving in the first place
There’s a setting most iPhone users have never looked at that can help in a big way. Go into your Calendar settings and look for an option that controls whether you automatically receive invitations from unknown senders. Switching this off means invites from people not in your contacts won’t land in your calendar automatically, which removes most of the problem before it starts.
Being cautious about where you share your email address is also worth thinking about. Calendar spam often starts the same way email spam does, with your address ending up on a list after a data breach or being picked up from a website you’ve signed up to. Using a secondary email address for online accounts and keeping your main one more private is a habit that pays off over time.
A few more habits worth having
If you ever receive a calendar invite from an unknown sender, don’t tap “accept” or “decline” on it. Both responses confirm to the sender that your address is active, which tends to result in more spam rather than less. Reporting it as junk through the Calendar app, where that option is available, is a better move and helps Apple identify patterns across multiple users.
It’s also worth keeping your iPhone’s software updated. Apple regularly patches security vulnerabilities and tightens the rules around what calendar subscriptions can do, so staying current gives you better protection without having to do anything complicated.
Calendar scams aren’t the most sophisticated phishing method out there, but they work because they catch people off guard. Most of us are used to being careful with emails and texts, but the calendar app doesn’t set off the same alarm bells. Knowing that it can be used this way is most of the protection you actually need.
