Frontier Airlines is warning customers about fake refund and payment emails

Frontier Airlines has posted a phishing warning for customers about an active email campaign. The messages are designed to look like they come from the airline and to get you to hand over payment or reservation details. Frontier is clear about what it will not do by email. Here’s how to recognise the scam, and what to do if you already clicked.

What Frontier says it will never ask

“We are aware of an active email phishing campaign targeting our customers,” the airline writes. “Frontier Airlines does not email customers requesting flight, reservation, payment or contact detail information. Do not respond to any email seeking this type of information.”

The company lists examples of requests it will never send:

• revalidate or confirm an upcoming flight or reservation
• re-enter or confirm credit card information
• provide payment information to receive a partial or full refund
• click a link or button to confirm card details, billing information, or a refund

Those last two points matter. A message that says your payment failed, or that you are owed a refund, can feel urgent when you have a trip coming up. That is the hook. Frontier says it will not ask you to confirm a card or submit payment details in order to receive money back.

What to do with a message like this

Frontier’s advice is direct:

• Don’t click any links or buttons in the message.
• Don’t enter or re-enter your credit card, payment, login or personal information.
• Don’t reply, and don’t use the contact details that came with the message.
• If you need to review a reservation, go to Frontier through the official website or app, not through a link in the email.

If you have already provided payment information in response to a message you now think was suspicious, Frontier says to contact your card issuer or bank. For other questions, it points customers to 801-401-9000, the number on its official site.

This campaign is aimed at airline tickets rather than hotel stays, but it sits next to the fake hotel payment pages we wrote about this morning, which also use a real-looking booking to collect card details. In both cases, genuine travel details in a message are not proof that the message is genuine.

What you can do

1. Ignore unexpected Frontier emails that ask you to confirm a flight, a card or a refund. Open the official app or type flyfrontier.com yourself if you want to check a booking.
2. Don’t trust a message just because it names your route or confirmation number. Those details can be guessed, reused or taken from other leaks.
3. Never enter a card number or a one-time bank code from a link in email.
4. If you already typed a card number, call the issuer, freeze or replace the card, and watch your statement. If you typed a Frontier password, change it on the official site and turn on any extra sign-in checks the airline offers.
5. If you want to speak to Frontier, use the number on its official site, currently 801-401-9000, not a number in the email.

How Frame helps

Scams like this often start from details that are already in circulation. Frame can also look up your verified emails in Have I Been Pwned’s breach database so you can see which of your addresses have appeared in known leaks, and Frame’s checklists explain what each leak exposed. Frame never collects or stores the leaked records themselves.

Related coverage

• Fake hotel payment pages now show your real name, dates and room price: a related travel scam that fills a fake payment page with a real reservation.
• Amadeus breach: SAS says 350,164 passengers had booking details reached: a current airline booking-data incident, and a reminder that leaked flight details can make later scam emails look convincing.
• How scammers use leaked data to make phishing personal: why a message that already knows your trip still may not be genuine.

Sources

• Frontier Airlines, Phishing Awareness, accessed November 11, 2026