If you ever receive a call or e-mail from any company offering services for the ASHA Convention, or encounter a suspicious website, or receive an email or text asking for permissions, and are unsure whether something is legitimate, please contact us immediately at convention@asha.org to verify with us before you proceed.
A new warning from the FBI highlights a cybersecurity vulnerability being used by attackers to exploit event communications, such as registration confirmations. The tactic is known as OAuth consent phishing.
Unlike traditional phishing used to steal passwords, consent phishing persuades a target to authorize a malicious application to access an existing account, potentially allowing an attacker to read and send emails and access sensitive information. That access can persist even after the password is changed.
In this scenario, attackers may pose as event organizers and send malicious links disguised as event invitations. Targets were then asked to verify their identities through an application controlled by the attacker.
Always pay attention to the permissions an application requests. Legitimate event registration rarely needs broad access to your email, files or contacts. If a consent screen appears after clicking an event link, close the window immediately.
Occasionally, companies target our exhibitors and members by falsely posing as “official” partners of ASHA. Please be wary of unsolicited calls or emails regarding securing hotel rooms, registration, exhibit booths, or meeting space for the ASHA Convention. These companies do not have access to ASHA's contracted hotel rooms or meeting space, and are in no way authorized to register attendees or conduct booth sales on ASHA's behalf. Do not provide these companies with your credit card or personal information.
Maritz Global Events (previously Spargo, Inc.) is the ONLY official registration and housing company for ASHA. Only representatives from Maritz can register you or book your reservation within our block of rooms. You will only be able to navigate to Maritz's registration and housing system through our own website once we open. Authorized information regarding the Annual Convention will come only from ASHA. Remember, a legitimate company would not initiate contact with you unless you contacted them first.
ASHA contracts with the hotels in our block and includes clauses to protect our attendees should the hotel oversell the rooms or should any issues arise with reservations. ASHA may not be able to assist attendees who have reserved rooms outside the block if problems result from booking through an unauthorized company.
The official ASHA websites include https://convention.asha.org, www.asha.org, and https://marketing.asha.org. We are aware of unauthorized websites that falsely identify themselves as ASHA (for example, http://ashaconvention.org/, ASHA2026.com and ASHA2026.org). We advise you to carefully examine any websites promoting registration, hotel reservations, booth space, or meeting space for the ASHA Convention to ensure that they are legitimate.
We often receive reports that unauthorized companies are contacting our exhibitors claiming to have attendee mailing and email lists. ASHA is the only organization who can sell/provide you with a legitimate ASHA Convention attendee mailing list. If you are interested in obtaining a Convention attendee list, please contact listrental@asha.org.