Don't fall for this dodgy phishing scam targeting Qantas frequent flyers

An unknown number of people received the scam email.

A Qantas plane with (inset left) a copy of the phishing email and (inset right) the dodgy email address it came from.

By Sarah Falson

Updated April 1, 2025, first published February 6, 2025

Qantas frequent flyers have been targeted by a scam to steal their money or personal data after a dodgy email was circulated.

There are 17 million Qantas Frequent Flyer members but Explore understands the Qantas database wasn't hacked and some people who received the email might not have been Qantas members.

Don't fall for this dodgy phishing scam targeting Qantas frequent flyers

An unknown number of emails were sent - some landing in the inbox of Qantas frequent flyer members - asking the recipients to click on a suspicious link.

Get exclusive travel tips, hidden gems & expert insights: delivered to your inbox

The email "Unauthorized access to your Qantas" does not originate from an official Qantas email address.

Read more on Explore:

It claims an unauthorised person has accessed the recipient's frequent flyer account and if they want to "cancel the operation" they should click on the link.

Explore has received a copy of the email but has not clicked on the link.

Qantas confirmed it was a scam email. It was aware of the scam and had reported it to the relevant authorities.

Explore understands a small number of Qantas frequent flyers fell for the scam and are working with Qantas to secure their accounts.

The airline has directed customers to its website including information about how to spot a scam and examples of some scam emails customers have received.

A screenshot of the dodgy scam email.

The website says: "If you're not 100% sure something is genuine, please don't click on any links."

Qantas declined to provide an official comment.

Scammers posing as well-known brands

A National Anti-Scam Centre spokesperson said it is common for scammers to use well-known Australian brands to try to steal personal information from Australians.

"The purpose of these phishing scams is to steal money or personal information," they said.

The purpose of phishing scams is to steal money and collect personal data. Picture by Shutterstock

"Their messages are designed to appear genuine, and often copy the format used by the business the scammer is impersonating, including using the business' branding and logo.

"Scammers will typically use information obtained through phishing scams to commit fraud, for example credit card fraud and account takeovers."

They advised Australians to report scams to the National Anti-Scam Centre's Scamwatch service and notify their bank if a scammer has their personal information or they have lost money.

Top tips for avoiding scams

The National Anti-Scam Centre provided the following tips to keep yourself safe online and avoid falling for scams.

STOP. Don't give money or your information to anyone if unsure.
CHECK. Ask yourself if the message or call is fake.
PROTECT. Act quickly if something feels wrong. Contact your bank immediately if you notice unusual activity or if a scammer gets your money or information. Seek help and report the scam or any suspicious contact or activity to Scamwatch. Your report will help us protect others.

Words bySarah Falson

Sarah is Explore's Digital News Editor. She believes regional travel is just as fun (if not better) than staying in the big cities and loves any travel experience to do with nature, animals and food!. My all-time favourite destination is ... Cornwall. From the giant seagulls to the blustery beaches, Cornish pasties and fishing villages, it stirs something romantic and seafaring in me. Next on my bucket list is … Mongolia. I want to go somewhere really unique that feels totally foreign and challenges my way of life. My top travel tip is … Don’t plan too much. Walk the streets and let it happen. And make sure you check out what’s within a few blocks of your hotel - sometimes the best local food is found that way.