HARRISBURG — Attorney General Dave Sunday is warning Pennsylvanians about a new phishing scam involving fake digital invitations sent through compromised email accounts.

According to the Office of Attorney General, scammers are sending email invitations to events, conferences and birthday parties from accounts belonging to friends or acquaintances. The emails often contain links directing recipients to view an invitation and RSVP.

Officials said users who click the links may be asked to log in using a Google, Apple, Microsoft or similar online account. Entering login information could result in malware being installed on a device or email credentials being stolen.

The attorney general’s office noted that legitimate invitation platforms generally do not require users to sign in simply to view an invitation.

“Scammers are constantly evolving their tactics to appear more credible and trustworthy,” Sunday said in a statement. “If you receive an unexpected invitation that requires you to log in or provide personal information, take a moment to verify it directly with the sender — that extra step can protect your personal data and prevent serious harm.”

The attorney general’s office encouraged consumers to verify invitations through a phone call or text message to the sender before clicking any links.

Officials also advised consumers to avoid entering passwords through invitation links, hover over links to confirm they lead to legitimate websites and be cautious of generic invitations.

Anyone who believes their email account may have been compromised should immediately change their password, enable two-step authentication and report the email as a phishing attempt to their email provider.

Consumers who believe they may have been involved in a scam can contact the Office of Attorney General’s Bureau of Consumer Protection through the agency’s website or by calling 1-800-441-2555.