It began as one of those small, unsettling glitches in the rhythm of daily life—the kind that makes you question your own memory. Eric Umansky, a journalist based in New York, was on Cape Cod last April for his nephew’s bar mitzvah. He woke up to a phone that felt like it was vibrating off the nightstand, an inbox swollen with messages from names he hadn’t thought about in years. The emails all converged on a single question: Was he really throwing a party on Saturday night? Umansky had no idea what they were talking about. He had no plans for a party, no special occasion on the calendar, and certainly no memory of sending an invitation. But there it was, in message after message: references to a “Special Private Dinner Party” scheduled for 7 pm on May 2, supposedly sent through Paperless Post, the popular online invitation service. As the morning wore on, the absurdity of the situation began to settle in. Here was a man in his maybe-forties, standing in a Cape Cod house surrounded by family and the faint smell of bagels and deli platters, nervously apologizing to people he hadn’t spoken to in fifteen years for an event he hadn’t actually planned. Some of those old acquaintances were mildly confused. Others were politely asking if he had meant to send the invitation to them. A few were apparently eager to RSVP. But beneath the confusion, Umansky felt a creeping dread: someone had access to his email, his identity, his contacts—and was using his name to fool the people in his life.
As the messages kept coming, the truth emerged. Umansky had not sent the invite, and he wasn’t planning to host a party anytime soon. He had become an early target in a phishing scam that would, over the following months, touch far more people. Phishing itself is nothing new; the term has been around since the 1990s, and anyone with an email account has likely encountered some crude attempt to steal passwords or personal data. But this was a more personal and insidious breed. Rather than promising a fake package delivery or threatening to close a bank account, the scammers were exploiting social intimacy—or at least the outward appearance of it. They had crafted a message that looked like a legitimate invitation from Paperless Post, complete with polished design and innocuous language, and sent it to the people in Umansky’s address book. The invitation asked recipients to enter their email username and password to view event details, or in some versions, to text a phone number and share a special code to RSVP. It was a classic credential-harvesting scheme, but it was dressed in the fabric of a friendly social occasion, which made it harder to recognize and easier to trust. The Federal Trade Commission issued a consumer alert in May, after reports spiked, warning people about exactly this type of unexpected message from invitation platforms like Evite or Paperless Post. Umansky could not figure out how the scammers had gotten in; he had taken precautions, including two-factor authentication, which should have made his account far more difficult to breach. His experience mirrored a growing reality: modern phishing scams have become highly sophisticated, using social engineering techniques that exploit urgency, fear, and personal relationships. Specialists call the targeted, relational version “spear phishing,” and artificial intelligence has only made the deception harder to spot. The emails can now mimic tone, grammar, and context with unnerving accuracy. If you receive an invitation from an old friend, your first instinct is not suspicion; it is warmth. That, of course, is exactly what the scammers are counting on.
When Umansky realized what had happened, his mind raced through all the possible consequences. His first instinct was damage control. He posted warnings on Facebook, LinkedIn, and his other social networks, going out of his way to tell anyone who might have received the fake invitation that it was not from him. His message was blunt: he was not hosting a party, and, more importantly, nobody should show up at his house. He half-expected the whole episode to be an embarrassment, a strange story to tell close friends later over a drink. But in the days and weeks that followed, something else began to happen—something he never could have predicted. The scam had inadvertently opened a door. Because the invitation was so personal, so specific, and so tied to the familiar ritual of a private dinner party, it made people pause before hitting delete. Instead of simply ignoring the message, they did the very human thing: they reached out to Umansky directly to ask if it was real. In doing so, they renewed contact with someone they had once known well but with whom they had lost touch. The very mechanism that made the phishing attack effective—its ability to tap into the residue of real relationships—also created a reason for those relationships to resurface. People who had drifted away felt just enough obligation, or curiosity, or concern, to send a text. And Umansky, who had spent years with the vague, nagging thought that he should catch up with certain people, suddenly had an invitation to respond. It was as if the scam had forced a crack in the ordinary social barrier that keeps people politely separated, and through that crack, genuine warmth began to trickle through.
Over the next several months, Umansky found himself reconnecting with a handful of old friends and colleagues in a way that surprised him. There were texts, yes, and the occasional email. But there were also in-person meetings. He had lunch with someone he hadn’t seen in years. He spent an hour on a video call with a former coworker who now lived in Mexico City—a person he had not spoken to in more than a decade. At first, the conversation circled around the strange coincidences of the fake invitation, the bizarre experience of being impersonated by a scammer. But quickly, it moved past that. They talked about their work, their families, the quieter changes in their lives. Umansky later recalled that he had an idea he wanted to bat around with his old colleague, something professional, something that had been sitting in a notebook for ages. They spent about ten minutes on that idea. The remaining fifty minutes were devoted to the real substance of a friendship: what they had been through, where they were going, and how it felt to be in touch again after so much time had passed. In the middle of that conversation, Umansky had a strange thought, one that he would later reflect on with a mix of amusement and awe. He wondered whether the phishing scam had actually been a net positive for his social life. It sounded absurd—the idea that a malicious act of digital fraud could make a person’s life better. And yet, here he was, having conversations he had meant to have for years, with people he had assumed were too busy, too distant, or too likely to find his outreach awkward. The scam had done something that he hadn’t been able to do on his own: it had given him an excuse to reach out without the fear of seeming needy or strange.
That fear, it turns out, is more common than we like to admit. According to a 2024 study published in the journal Communications Psychology, which surveyed 2,400 adults across the United States, the United Kingdom, and Canada, people frequently avoid contacting old friends because they assume the other person won’t want to hear from them, or because they worry the interaction will be awkward. The study’s authors found that social withdrawal is not just about being busy; it is often rooted in a deep, quiet anxiety about rejection. We assume that old friends have moved on, that they have new lives, new circles, new priorities. We imagine the silence on the other end of the phone, the polite but distant tone, the uncomfortable pause after “Oh, hello. It’s been a while.” So we stay quiet. The study also highlighted a broader cultural factor: in North America, in particular, work and productivity have come to occupy such a large space in our lives that we have systematically stripped away the time and energy we might once have devoted to maintaining friendships. Parenthood, caring for aging relatives, moving to new cities, and the simple exhaustion of modern life all conspire to keep us separated. Our social networks shrink. Our touchpoints with old friends become increasingly rare. And yet the desire for connection remains, buried under layers of obligation and inertia. This is why something like a fake party invitation can have such an outsized effect. It acts as an external push. It removes the burden of initiation. You are not calling because you are lonely or nostalgic; you are calling because someone may have been hacked, because you were worried, because you wanted to check in. It turns the act of reaching out into a response rather than a risk. And in doing so, it makes connection feel suddenly easy, even natural.
There is, of course, a profoundly ironic lesson in all of this. The same technology that has made it easier to fake friendship—to send convincing messages, to impersonate a human voice, to trick us into trusting a stranger—has also, in Umansky’s case, helped true friendship reassert itself. The scammers who targeted him were trying to exploit trust. They were trying to leverage the goodwill that exists between people, to turn it into access. Instead, they inadvertently reminded a collection of real people that they cared about one another enough to ask a question. It is impossible to say whether such positive outcomes are common. Most phishing scams end in stolen credentials, financial losses, and a lingering sense of violation. But there is a human story hidden in the margins of the crime, and it is worth telling. We are so disconnected from one another, so quick to assume that others don’t want to hear from us, so reluctant to make the first move, that even a false party invitation can serve as a bridge. Maybe the lesson is not that scams are good. They are not. Maybe the lesson is that we should not need a hack to prompt us to reach out to the people we care about. We should not need a lie to give us permission to ask a simple question: “Hey, it’s been a long time. How are you?” The fact that so many of us do need that permission speaks to how deeply we have internalized the fear of rejection, how thoroughly we have deprioritized the simple act of staying in touch. Eric Umansky’s fake party became an accidental social experiment, a gentle reminder that the relationships we fear we have lost may still be there, waiting for a sign. And if a phishing scam can bring two old friends together for an hour-long video call, imagine what we could do on our own—if we only sent the invitation.
