February 25th 2014
Our colleagues at Action Fraud have received a number of reports of phishing emails claiming to be from British Airways, informing the recipine that their order has been successfully booked.
The emails, which are realistic in appearance, include a booking reference, departure date/time, and prices. They continue to say that the flight and seat number can be located in the lower part of the ticket, and prompt the recipient to download a copy from suspicious links. The downloadable ‘ticket’ is likely to contain malware.
The email subject header reads [email protected], a spoof address.
If you receive one of these emails, do not forward it to anybody, delete it, do not click on any links. Instead, report it by calling Action Fraud on 0300 123 2040 or via their online fraud reporting tool.
British Airways advice on phishing emails
- British Airways will never ask you to enter personal bank account or credit card details into an email or through a link sent via an email
- You will only be asked for your card payment details if you wish to change or refund your booking on ba.com. We require this information specifically to debit or credit your card in relation to your booking
- Legitimate emails from British Airways will contain your booking reference and the email will not have been sent from a web-based mail server such as gmail, Hotmail or Yahoo!
- British Airways will never request money payments through a third party, such as Western Union