Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Frontier Airlines Scam Email - How to Protect Yourself
Frontier Airlines Scam Email - How to Protect Yourself

There is a convincing spear-phishing email scam targeting Frontier Airlines passengers. It seems this is linked to a backend data compromise because the scammers possess authentic, highly accurate trip details.

How the Scam Works

  • The Email Hook: Victims receive an email stating their Frontier Airlines booking summary has an "unconfirmed status due to payment" or offers a "billing and adjustment refund".
  • The Sender Address: The emails are sent from a non-Frontier domain: noreply(@)reviewpro.com.
  • The Scariest Part: The email contains highly accurate personal trip details, including your real name, actual flight itinerary, and matching confirmation number. It has even tracked real-time itinerary changes made by Frontier.
  • The Fake Link: The email directs you to a highly convincing spoofed website. While it includes "flyfrontier" in the web address, the malicious domain ends with crs (e.g., flyfrontiercrs.com, which was newly registered right before the wave of emails).
  • The Goal: The page prompts you to re-enter or update your credit card details, address, and email.

If You Received or Interacted With This Email

  • If you only opened the email or clicked the link: You are likely safe, provided you didn't enter text into any of the forms. To be completely secure, you can change your Frontier Airlines account password.
  • If you entered your credit card info:Freeze or lock your credit card immediately via your bank's mobile app. Contact your financial institution to report the fraud and request a replacement card. Some users noted the phishing site might capture keystrokes or text field data even if you didn't hit the submit button
  • Verify your flight directly: Do not use the links in the email. Log in directly via the official Frontier Airlines app or the legitimate website (flyfrontier.com) to check your actual booking and payment status.
0

Comment sectionComments / Answers (0)

Remove sensitive information from your post. Your IP address will be used to display your estimated location.

Comment count 0


waiting