Back to Blog

How to Handle Spam Invitations on a Shared Family Calendar

Report suspicious calendar invitations, verify claimed charges elsewhere, and limit what unknown senders can add to a family calendar.

How to Handle Spam Invitations on a Shared Family Calendar

Do not click links, call numbers, or accept a suspicious calendar invitation. Report it as spam through the calendar service, remove it, and change invitation settings so unknown senders are not added automatically. Then check the shared calendar’s members and public-sharing settings. A fake renewal notice on a calendar is still an unsolicited message, not proof that anyone bought something.

Triage the invitation without following its story

Calendar spam often tries to create urgency: a subscription renewed, a payment failed, or an account will close today. The event description may contain a phone number or link that leads to a scammer. Its appearance inside a familiar calendar does not authenticate the claim.

First, ask whether another family member recognizes the organizer, title, and time. Do not forward the invitation around, since forwarding can spread its links and expose addresses. If nobody recognizes it, use the provider’s built-in spam control. Google’s official instructions say suspicious Google Calendar events can be reported as spam and recommend limiting automatic additions to known senders in Report inappropriate calendar invitations and events.

If the event claims a real company charged you, verify separately. Open the company’s known app or type its address yourself. Check the relevant statement directly. Never use the contact details inside the event.

Clean up the calendar and its access

Reporting and deleting solve different problems. Reporting helps the provider classify the invitation; deletion removes what you see. Follow the provider’s own sequence, especially for recurring events, rather than opening every occurrence.

Next, review the calendar itself:

1. Confirm which people can see or edit it.

2. Remove old roommates, former caregivers, and unused app integrations.

3. Check whether the calendar is public or available through a public link.

4. Set invitations to appear only from known senders, if the provider offers that choice.

5. Review email and push notifications so one spam series does not overwhelm the household.

Do not respond “No” just to send the organizer a message unless your provider recommends it. A response may confirm that the address is active. Report through the product controls instead.

If an unknown person has edit access, treat that as more than calendar spam. Remove the access, change the account password, review active sessions and recovery details, and check whether other events were changed or deleted.

Create a one-person response rule

A shared calendar can turn one fake event into five parallel investigations. Choose one calendar administrator and a backup. Everyone else flags the event in a separate household channel and leaves it untouched until the administrator checks it.

Use a compact report: “Unknown renewal event, Tuesday at 9, organizer not recognized.” Do not paste the event’s phone number, shortened URL, attachment, or threatening text. The administrator reports it, checks access, and posts “removed” when done.

For legitimate invitations from a new school, clinic, or contractor, verify the sender through a known website or prior correspondence before changing the unknown-sender rule. A strict setting may require a little manual work, but it keeps untrusted event text off the family schedule.

How HomeCo helps

HomeCo can carry the response workflow without copying the suspicious content. Create a recurring calendar-access review with two owners, plus a checklist for spam: verify in official app, report, remove, inspect members, close the task.

Keep sensitive appointments private. The shared calendar should contain only the details others need for coordination. If your family is reducing broad access, revoke a public shared calendar link provides a focused cleanup process.

HomeCo comments can document when the event was removed and settings were reviewed. They should not preserve the scam link or a screenshot full of household email addresses.

FAQ

Does a calendar event mean my account was hacked?

Not by itself. An outsider may be able to send an invitation without accessing your account. Unknown editors, altered settings, unfamiliar sessions, or changed recovery details are stronger reasons to begin account recovery.

Should I call the number in a fake renewal event?

No. Verify any claimed charge in the company’s official app, website, or a statement you obtained independently. The number in the event belongs to the message you are trying to verify.

What if a real new contact cannot invite us?

Verify the person through a known channel, then add or accept that specific sender according to your provider’s controls. Do not broadly reopen automatic invitations for everyone.