There were hundreds of reports from Google Calendar users receiving notifications for events they did not create. These "events" are spam ads and potential phishing threats. If this has happened to you, you are not alone – but fortunately, there is a way to put an end to it.
It seems that spammers have found a way to take advantage of Google Calendar's integration with Gmail. If you receive a calendar invitation in Gmail, Google Calendar automatically adds the event, even if you do not accept the invitation.
Once this was detected, spammers added inviting callout invitations and dodgy links to their emails. Often the topics "Your iPhone Xs Max is ready to be picked up" and "iPhone X's free giveaway" are currently being used. This works even if the email invitation has been moved directly to your spam folder and you have never seen it in Gmail Calendar on the Web . Sign in with the Google Account that received the spam and click the gear icon in the upper right corner. Then select "Settings".
Now choose "General" from the menu on the left side of the screen to expand more options. Select "Event Settings" there. On the right side of this menu, find the "Automatically add invitations" option and click on it. Then select "No, only show invitations I responded to" from the list.
Next, choose "View Options" from the page menu and make sure that the check box next to "Show disapproved events" is cleared.
Finally, click on "Events from Gmail" and deselect "Automatically add events from Gmail to my calendar". From now on, spam invitations can no longer get into your calendar. However, you may need to manually delete already-added calendar events.
It is a bit sad that we have to do it ourselves. These auto-add features in Google Calendar should either be disabled by default or much more reviewed. But until Google does something to solve the problem, there is at least one solution.
Do not miss: Enabling Dark Mode in Google Calendar