Email spam has one major weakness.
People expect the inbox to contain junk.
A calendar feels different.
Meeting invitations are designed to become part of a person’s schedule. Depending on provider settings, an invitation can appear as a pending event, trigger notifications, or occupy attention in a place normally reserved for appointments, deadlines, and people the recipient actually knows.
That makes the calendar a tempting side door.
Google’s current Calendar documentation explicitly includes controls for unknown senders, spam reporting, and blocking organizers. Users can choose to add invitations only after responding or only when the sender is known. See Google Calendar’s invitation controls and its guidance on reporting calendar spam.
Those controls exist because invitations can be abused.
A calendar notification has different weight
An ordinary promotional email competes with newsletters, receipts, alerts, personal mail, and everything else in the inbox.
A meeting invitation says something more urgent: this may require your time.
That framing can force a recipient to inspect material they would have ignored as email.
A promotional event title, suspicious link, fake appointment, or recurring event can therefore gain attention by arriving through scheduling infrastructure instead of ordinary mail.
The sender has not discovered a magical new audience.
They have discovered a more trusted notification surface.
Provider settings change the attack surface
Calendar spam is not equally effective everywhere.
Google now lets users restrict invitations from unknown senders and block organizers. Reported spam can be removed from the calendar. Providers can classify suspicious invitations before they become prominent.
Those controls reduce the value of the tactic.
They also illustrate the larger pattern.
Every useful communication feature creates a path from one person to another. Once that path receives more attention than ordinary email, somebody eventually tests whether it can be used for promotion, scams, or repetitive unsolicited contact.
A calendar invite was built to answer a social question:
Can we meet at this time?
Spam turns it into a delivery mechanism for a completely different question:
Can I make you look at this?