Phishing Emails Target Frontier Airlines Passengers

Scammers use real booking numbers to request card details for a fake refund, and Frontier says the campaign is active.

Updated on Nov. 2, 2026 in Cybersecurity

Bold flat-color editorial illustration of a hooked metal lure above three plain cream tiles on a slate field, evoking a deceptive bait-and-hook scam. — Scammers impersonating Frontier Airlines are emailing passengers with real booking numbers and a fake duplicate-ticket refund, asking for bank details, and the airline says the campaign is active. AI Illustration. Upload story photo >

Live Poll

Do you trust airlines to keep your payment information safe from scammers?

Scammers ran a phishing campaign against Frontier Airlines passengers, sending emails that claimed a duplicate-ticket refund required bank details. Some recipients entered their card information, and Frontier has posted a warning page on its website; the campaign is currently active, so the development is confirmed rather than projected.

Why it matters

The emails used real confirmation numbers and a refund pretext, which makes them harder to spot than generic spam. The incident follows a similar phishing-related breach at American Airlines in July 2022, which exposed names, addresses, and phone numbers rather than financial data.

The phishing emails included confirmation numbers for affected bookings, a detail that lends them apparent legitimacy. The source does not report a count of affected passengers or the volume of emails sent, so the reach of the campaign cannot be measured from the available material.

The players

Frontier Airlines

A United States low-cost carrier that posted a warning page and advises affected passengers to contact their card issuer.

American Airlines

A major United States carrier that suffered a phishing-related breach in July 2022 exposing names, addresses, and phone numbers.

The details

The emails claim that a refund is owed for duplicate ticketing and that the recipient's bank details are needed to release it. They also state that the settlement batch for the reservation has already closed, a deadline that pressures recipients to act quickly. Frontier states that it does not email customers asking for flight, reservation, payment, or contact details, so any such request should be treated as suspect.

July 2022: American Airlines suffered a phishing-related breach that exposed employee emails and passenger data.
September 2022: Simple Flying reported on the American Airlines data breach.
November 2, 2026: Simple Flying published its article on the Frontier phishing campaign.

The Tech Race

Airlines have become recurring targets for phishing, with American Airlines' July 2022 breach establishing a documented precedent for exposed passenger data. The Frontier campaign extends that pattern by directly soliciting payment card details rather than only harvesting contact information.

Frontier passengers who submitted card details should contact their card issuer or financial institution, as the airline advises. Anyone who received the email should not click links or reply directly, since Frontier says it does not request payment or contact details by email.

The takeaway

Watch whether Frontier reports how many passengers submitted card details, which would give the scale of the campaign. Passengers should treat any refund request that asks for bank information as suspect, regardless of whether it cites a real confirmation number.