PanicStation.org
UK USA
us Technology & digital loss

What to do if…
your calendar fills with spam events that include links and phone numbers

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy USA guide

Short answer

Do not click the links or call the numbers in the events. Find and remove the source of the events, such as a subscribed calendar, automatic invite setting, or connected app with calendar access.

Do not do these things

  • Do not click links in the event body, location field, notes, or attachments.
  • Do not call the phone numbers in the spam events.
  • Do not install any app, browser extension, remote-support tool, “security app”, or “virus remover” promoted by the event.
  • Do not use an unsubscribe link inside the spam event.
  • Do not accept or decline spam invites just to clear them, because responding may show the sender that the address is active.
  • Do not assume deleting visible events is enough if new events keep appearing.

What to do now

  1. Take one screenshot before removing anything.
    Capture one spam event showing the calendar name or source, plus the link or phone number. This can help if you report it or ask IT for help.

  2. Find the source of the spam.

    • If you see a calendar name you do not recognise, it is likely a subscribed or added calendar.
    • If the events look like meeting invitations, your calendar may be automatically adding invitations.
    • If the events started after installing or connecting an app, that app may have calendar access.

  3. If you use iPhone, iPad, Apple Calendar, or iCloud, remove the calendar or event source.

    • Open the Calendar app and tap the spam calendar or one spam event.
    • Use Delete Calendar, Unsubscribe, or Delete Event if shown.
    • If Report Junk appears for an event from an unknown contact, you can use it.
    • Check your calendar list for any calendar you do not recognise and delete, unsubscribe from, or hide it.

  4. If you use Google Calendar, report what you can and stop automatic additions.

    • On a computer, open Google Calendar and use Report as spam if it appears for the event.
    • In Google Calendar settings, go to Event settings → Add invitations to my calendar.
    • Choose a safer option such as Only if the sender is known or When I respond to the invitation in email.
    • Delete, unsubscribe from, or remove any calendar you do not recognise.

  5. If you use Outlook, Outlook.com, or Microsoft 365, stop email-created events and remove unknown calendars.

    • In Outlook on the web, open Settings → Calendar → Events from email.
    • Choose settings that stop event summaries from appearing on your calendar, or turn off automatic calendar additions where available.
    • Hide or remove any additional, shared, or subscribed calendars you do not recognise.
    • If it is a work or school account, contact your IT or security team before changing organisation-managed settings.

  6. Review calendar access for connected apps.

    • In the account that owns the calendar, review third-party apps, connected services, extensions, and devices.
    • Revoke calendar access for anything you do not recognise or no longer use.
    • Review recent sign-ins or devices and sign out of sessions you do not recognise.

  7. Secure the account if anything suggests compromise.

    • Change the password if you clicked a link, shared information, installed something, reused that password elsewhere, or see unfamiliar sign-ins.
    • Turn on multi-factor authentication if it is available.
    • Check recovery email addresses and phone numbers for anything you did not add.

  8. Report it if you clicked, called, installed something, paid, or shared information.

    • Report scams or fraud through the FTC’s official reporting site.
    • For cyber-enabled fraud, you can also report to the FBI’s Internet Crime Complaint Center.
    • Type the reporting sites directly into your browser or use a trusted bookmark, not a link from the spam event.
    • If this is a work or school calendar, report it to your IT or security team.

What can wait

  • You do not need to delete every spam event one by one before removing the source.
  • You do not need to decide right now whether your phone or computer is “infected”; calendar spam often comes from invitations, subscriptions, or app access rather than device malware.
  • You do not need to contact the sender, argue with them, or use any phone number in the event.
  • You do not need to buy security software because a calendar event says there is a virus.

Important reassurance

Calendar spam is designed to create urgency and push you into clicking or calling. Removing the calendar source, tightening invite settings, and checking app access usually stops the immediate flood without engaging with the spammer.

Scope note

These are first steps only. Later decisions may need specialist help from your calendar provider, workplace IT, bank, card issuer, or a fraud-response service if you paid money, shared sensitive information, or gave someone access to your device.

Important note

This is general information, not legal, financial, technical, cybersecurity, or professional advice. For an account you believe is compromised, use your provider’s official recovery process or ask your workplace IT or security team for help.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us