A scam email is easy to ignore when it gets your flight details wrong. Frontier Airlines customers are dealing with the opposite problem: fraudulent refund and payment messages that arrive with their genuine confirmation numbers and itinerary details. Frontier has confirmed an active phishing campaign and posted a warning on its website.
The emails come in two main flavours. One offers a refund, but only after the passenger 'verifies' the card used for the booking. The other claims a payment on an upcoming trip failed, nudging the recipient to fix it before travel. That second version is particularly effective — anyone flying soon has a strong incentive to resolve what looks like a ticketing problem, and some recipients have reportedly handed over credit card details on the linked sites.
Frontier's advice is clear: the airline will never email asking you to revalidate a reservation, reconfirm card information, or provide payment details to receive a refund. If a message looks suspicious, don't click its links or reply. Instead, open the Frontier website or app directly and check your reservation there. If you've already entered payment information, contact your card issuer straight away.
The awkward question is how scammers got the booking data in the first place. A confirmation number plus flight details isn't information a random fraudster should have. Possible explanations range from a breach at the airline or a third-party provider, to misuse by someone with legitimate access, to compromised passenger email accounts — though the pattern suggests something more systematic. Notably, Frontier disclosed a security incident in early October involving its customer care database, which stores information submitted through its customer care form. The airline said it changed the database configuration and stepped up monitoring. There's no confirmed link between that incident and the phishing campaign, but the timing makes the transparency question hard to ignore.
For travellers, the takeaway is simple and important: a correct confirmation code no longer proves anything. Treat any unsolicited email about refunds or failed payments as suspect, no matter how accurate the details look, and verify everything through the official app or website. If you're flying Frontier soon, a quick check of your reservation in the app — rather than through email links — is the safest habit. The deeper issue, though, shouldn't fall on passengers alone: Frontier owes its customers a clearer explanation of how this data was exposed.
