Scammers Target Frontier Airlines Passengers in Phishing Campaign
Frontier Airlines has posted a warning page after some passengers entered credit card details in response to fake refund emails.
Updated on Nov. 2, 2026 in Cybersecurity

Live Poll
Do you trust airlines to keep your payment information safe from scammers?
Some Frontier Airlines passengers entered their credit card details under false pretenses after receiving phishing emails claiming a refund was owed for duplicate ticketing. Frontier has posted a page on its website warning customers about the active email campaign.
Why it matters
The scam uses real confirmation numbers and urgency to pressure travelers into handing over payment information, which can lead to unauthorized charges. The episode follows a similar phishing-related breach at American Airlines in July 2022, underscoring how airline customers are a recurring target.
Frontier's warning is based on its own reports of an active campaign, but the source gives no count of affected customers. The only comparator cited is the July 2022 American Airlines breach, which exposed names, addresses, and phone numbers for a very small number of customers rather than payment data, and the scope of the Frontier campaign remains unknown.
The players
Frontier Airlines
A U.S. low-cost carrier whose customers were targeted by the phishing emails and which has posted a public warning page about the scam.
American Airlines
A major U.S. airline that suffered a phishing-related data breach in July 2022, which exposed a small number of customers' names, addresses, and phone numbers.
The details
Scam emails claim to come from Frontier and say the settlement batch for a reservation has already closed, then direct recipients to enter card details to obtain a refund for duplicate ticketing. The messages include corresponding confirmation numbers to appear legitimate. Frontier states it does not email customers requesting flight, reservation, payment, or contact details.
Timeline
July 2022: American Airlines suffered a phishing-related breach exposing employee emails and passenger data.
September 2022: Simple Flying reported on the American Airlines data breach.
November 2, 2026: Simple Flying published its article on the Frontier phishing campaign.
Industry Pattern
The Frontier campaign follows the July 2022 American Airlines phishing breach, which exposed names, addresses, and phone numbers for a very small number of customers. Where that earlier incident was a data exposure, the Frontier scam goes further by directly soliciting card details from passengers.
If you received a Frontier email about a duplicate-ticket refund, do not click any links or reply to it. If you already entered card details, contact your card issuer or financial institution right away to monitor for unauthorized charges.
The takeaway
Airline customers should treat unsolicited refund emails with suspicion, since legitimate carriers do not request payment details by email. Verifying any refund claim directly through the airline's official app or website is the safest step.
Further reading
For more on how scams like this unfold, browse our Cybersecurity coverage.
Source note: This article includes information reported by Simple Flying.
Live Poll
Do you trust airlines to keep your payment information safe from scammers?










