The Prospect Sent the Calendar Invite After a LinkedIn DM: Verify and Accept the Inbound Booking
When a prospect creates and sends the meeting invite, verify the organizer identity, tie it to the LinkedIn conversation, confirm the agenda, and cancel any pending outbound booking actions before you accept.
Research this article with AI
Follow Well Met on Google

You had a solid LinkedIn conversation. The prospect replied three times, asked about pricing, then said they wanted to talk. You expected to send a Calendly link. Instead, they sent you a calendar invite.
This reversal feels good. The prospect is leaning in, taking the next step without friction. But the workflow is backwards from what your team usually runs, and that creates a small verification problem.
Inbound calendar invites require the same inspection you apply to any unexpected message. The invite might be legitimate, or it might be a phishing attempt using calendar systems to bypass email filters. Your job is to verify organizer identity, tie the invite to the LinkedIn thread, confirm the meeting purpose, and accept only after everything checks out.
How is a prospect-created invite tied to the LinkedIn conversation?
The first check is continuity. Open the LinkedIn message thread and confirm the prospect explicitly said they were sending an invite. Look for a message like 'I'll send a calendar hold for Tuesday at 2pm' or 'Dropping an invite in your inbox now.'
If the invite appeared without warning in the same 24-hour window as your last LinkedIn exchange, cross-reference the proposed time with anything mentioned in the conversation. If the prospect suggested Tuesday afternoon and the invite is for Tuesday at 2pm, continuity is clean.
If the invite has no matching DM reference, treat it as unsolicited. Calendar phishing campaigns send fake meeting requests to busy professionals, hoping they accept without checking organizer details. Even when the timing feels plausible, verify the sender before you click accept.
Check the organizer email address in the calendar invite against the prospect's LinkedIn profile. Open their profile, look for a listed email or company domain in their contact info, and compare it to the 'From' field in the invite header. A mismatch means the invite did not come from the person you were messaging.
Who verifies the organizer, host, attendees, and purpose?
You do. The recipient of an inbound invite owns verification before acceptance.
Organizer verification means confirming the email address in the 'Organizer' field belongs to the prospect. If their LinkedIn profile lists a company domain and the invite comes from a personal Gmail address, ask in the DM thread before accepting. Scammers often spoof display names while using unrelated email addresses.
Host verification applies when the invite includes a video conferencing link. Click the link preview (without joining) and check the host name shown in the Zoom, Teams, or Google Meet details. If the host name does not match the prospect's name or company, the invite may have been forwarded or copied from another meeting.
Attendee list tells you who else is invited. If the prospect added colleagues, that signals a group conversation. If the attendee list includes unfamiliar external addresses, pause and verify in the LinkedIn thread.
Meeting purpose should match what you discussed. If your LinkedIn conversation focused on a product demo and the invite is titled 'Vendor Onboarding,' the purpose shifted without explanation. Confirm the agenda before you accept.
| Checkpoint | What to verify | Action if mismatched |
|---|---|---|
| Organizer email | Matches LinkedIn profile or company domain | Ask prospect to resend from verified address |
| Source DM reference | Invite was mentioned in LinkedIn thread | Reply in DM asking if they sent the invite |
| Meeting purpose | Title and agenda align with conversation topic | Confirm agenda in LinkedIn before accepting |
| Host identity | Conferencing link host name matches prospect | Request new link from verified organizer |
| Attendee list | Only expected participants are included | Ask who the unfamiliar attendees are |
| Timing | Proposed time was discussed or confirmed in DM | Double-check availability mentioned in thread |
Which pending outbound scheduling actions should be cancelled?
Once you verify and accept the inbound invite, cancel any outbound booking steps you started before the prospect took over.

If you sent a Calendly or Chili Piper link in the LinkedIn thread, send a follow-up message acknowledging the invite they sent and confirming you accepted it. Example: 'Got your invite for Tuesday at 2pm, accepted. Looking forward to it.' This closes the loop and prevents confusion if they were about to click your original scheduling link.
If you have an automated reminder sequence running that will send another scheduling link in 48 hours, disable it. The meeting is booked. Sending another calendar tool link after you already accepted their invite creates friction and looks disorganized.
If you forwarded the prospect's details to an assistant or SDR with instructions to send a meeting invite, notify them that the prospect already sent one and you accepted. This prevents duplicate invites landing in the prospect's inbox.
Check your CRM for open tasks tied to this conversation. If there is a task labeled 'Send booking link' or 'Schedule discovery call,' mark it complete and log the accepted invite as the outcome.
What happens when the invite looks suspicious or incomplete?
Delete it. Do not click accept, do not click the conferencing link, and do not reply to the calendar notification email.
Calendar phishing works because invites bypass normal email inspection. Users treat meeting requests as routine workflow instead of potential threats. According to Guardian Digital, most security teams monitor inbox activity closely but calendar activity receives much less scrutiny, creating a blind spot attackers use to deliver malicious links.
If the organizer email is unfamiliar, the invite appeared without a matching LinkedIn message, or the conferencing link preview shows a host name you do not recognize, the invite is not safe to accept.
Reply in the LinkedIn DM thread and ask the prospect directly: 'Did you send a calendar invite today?' If they confirm, ask them to resend from their verified work email. If they did not send anything, delete the invite and report it as phishing to your IT team.
Even legitimate invites can carry incomplete information. If the agenda is blank, the meeting title is generic like 'Catch-up,' or the duration is set to three hours without explanation, clarify the purpose before you commit calendar time.
How do you prepare after accepting a verified invite?
Log the meeting in your CRM immediately. Link the calendar event to the prospect's contact record and the LinkedIn conversation thread. Add notes summarizing what you discussed in the DMs so your team has context if someone else needs to step in.
Send a confirmation message in LinkedIn within two hours of accepting. Example: 'Accepted your invite for Tuesday at 2pm. I'll send a brief agenda tomorrow so we can make the most of the 30 minutes.' This reassures the prospect the meeting is locked and sets expectations for preparation.
Prepare a short agenda document 24 hours before the call. Include three to four topics you plan to cover, any questions you want to ask, and one outcome you hope to confirm by the end of the conversation. Send it as a reply to the calendar invite or attach it to a LinkedIn message.
Set a reminder for yourself 15 minutes before the meeting to review the LinkedIn thread, check your notes, and pull up any relevant materials. Inbound invites often come from prospects who are moving quickly, so preparedness matters more than usual.
If the prospect included colleagues in the attendee list, research their roles on LinkedIn before the call. Knowing who else is joining helps you tailor the conversation and avoid surprises when a CFO shows up on a call you thought was a solo product demo.
Most security teams monitor inbox activity closely but calendar activity receives much less scrutiny, creating a blind spot attackers use to deliver malicious links.
Guardian Digital, 2026-05-24Calendar phishing works because meeting invites move through a different workflow than regular emails, and usual email security controls do not inspect them the same way.
Guardian Digital, 2026-05-24BANT qualification (Budget, Authority, Need, Timeline) is a documented framework used to verify whether a prospect merits a scheduled appointment.
DemandNexus, 2025-04-05A confirmed appointment without context is a meeting your AE has to re-qualify, which wastes the time your team spent qualifying in the first place.
DemandNexus, 2025-04-05Frequently asked questions
Should I accept a calendar invite from a prospect I only messaged once?
Only if you can verify the organizer email matches the LinkedIn profile and the invite was explicitly mentioned in your conversation. A single-message thread followed by an unsolicited invite is a red flag. Reply in LinkedIn and ask if they sent it before you accept.
What if the organizer email is a personal Gmail address instead of their company domain?
Ask the prospect in the LinkedIn thread if they prefer to use a personal email for scheduling. Some people do. If they confirm, accept the invite. If they seem confused or deny sending anything, delete the invite and treat it as phishing.
Can I accept the invite and verify details later?
No. Once you accept, the event lands on your calendar and starts sending reminders. If the invite turns out to be phishing or misdirected, you will need to manually delete the event and may have already clicked a malicious conferencing link. Verify first, then accept.
How do I handle duplicate invites if both the prospect and I sent one?
Accept theirs, decline yours, and send a message acknowledging the overlap. Example: 'I accepted your invite for Tuesday. Declined the one I sent earlier to avoid confusion. See you then.' This keeps one clean event on both calendars.
What if the invite has no agenda and the prospect does not reply when I ask for one?
Prepare your own agenda and send it 24 hours before the call. If the prospect still does not engage, treat the meeting as a discovery conversation and go in with open questions about their goals and timeline.