Australians are being targeted by a surge in SMS and email scams impersonating Qantas, with fraudsters sending messages designed to steal personal details, login credentials and payment information. 

These scams look legitimate, use official branding, and create a sense of urgency, all designed to get you to act before you have time to think. Here’s what’s happening and how to stay protected.

What the Qantas impersonation scam looks like

Scammers are sending messages that appear to come from Qantas, often using the airline’s logo, colours and familiar language. 

The message may claim you need to:

• Claim a refund 

• Redeem a special reward or gift 

• Use Frequent Flyer points before they expire 

• Confirm your account to avoid losing benefits
   

Clicking the link takes you to a fake website that looks like the real Qantas page. Any information you enter, such as login details, personal information or payment data goes straight to the scammers. Qantas will never ask for your passwords, PINs or one-time verification codes via email or SMS.

Why these scams work

Travel brands are highly trusted, and many Australians have Frequent Flyer accounts or recent travel activity. Scammers take advantage of this by sending messages that feel relevant and time-sensitive. 

Common tactics include:

• Urgency – “Your points expire today” 

• Scarcity – “Limited-time reward” 

• Excitement – Unexpected refunds or bonuses 

• Fear of missing out – Pressure to act immediately
   

You don’t even need to be a Qantas customer to be targeted. If your contact details have been exposed in a data breach, you may be more likely to receive these types of messages.

Examples of what this looks like

Warning signs to watch for

Be cautious if you receive a message that includes: 

• An unexpected offer, refund or reward 

• A sender address that looks unusual or slightly different from the official domain 

• Links that redirect you to a login or payment page 

• Messages creating pressure to act quickly 

• Requests for personal details, passwords, banking information or verification codes 

When in doubt, don’t click the link. Instead, go directly to the official Qantas website or app and check your account there.

How to Keep Your Data Safe

• Use strong & unique passwords  
  • Create complex passwords with a mix of letters, numbers, and special characters.  

• Turn on two-factor authentication (2FA)  
  • Add an extra layer of security by requiring a second step to verify your identity.  

• Keep an eye on your accounts  
  • Regularly review bank, credit card, and loyalty accounts for any unusual activity.  

• Stay up to date  
  • Install the latest software updates on your devices and apps to patch known vulnerabilities.  

• Use anti-scam software  
  • A trusted security app like Trend Micro ScamCheck blocks spam and scam messages as well as unsafe websites.   

Already a Trend Micro Customer?

Visit your Trend Micro Account to see if Trend Micro ScamCheck is included in your subscription.