Frontier Airlines Warns of Phishing Emails That Use Passengers’ Real Booking Details

What the Emails Look Like

The first warnings came from passengers themselves. A “PSA: Email Scam” thread in Reddit’s Frontier Airlines community on November 1 collected reports of emails quoting real trips, and it reached Hacker News under the title “Frontier Airlines Likely Breached” (RuntimeWire).

According to Online Threat Alerts, the emails:

• come from [email protected], not a Frontier address;
• claim the booking has an “unconfirmed status due to payment”, or offer a “billing and adjustment refund”;
• include the passenger’s real name, itinerary and matching confirmation number, and in some cases even reflected schedule changes Frontier had made;
• link to a fake site whose address contains “flyfrontier” but isn’t Frontier’s, such as flyfrontiercrs.com, which asks for card details, a billing address and an email address.

The reviewpro.com address is an odd detail. ReviewPro is reputation-management software for hotels, made by the Shiji Group (Shiji). Whether Frontier uses it, whether an account there was abused, or whether the sender address was simply faked hasn’t been established. Sender addresses in email are easy to forge.

What Frontier Says

Frontier’s statement is short: “Frontier Airlines does not email customers requesting flight, reservation, payment or contact detail information.” It tells customers not to respond to emails asking for that information.

The airline lists what it will never ask you to do by email:

• revalidate or confirm an upcoming flight or reservation;
• re-enter or confirm credit card information;
• provide payment information to receive a partial or full refund;
• click a link or button to confirm card details, billing information or a refund.

Every one of those matches what the scam emails ask for. The page doesn’t mention a data breach.

Where Could the Scammers' Data Come From?

Frontier hasn’t explained it, and no evidence so far links the emails to a specific incident. Two earlier security problems at the airline are on record, though, and both involved booking or personal data.

• The 2026 data breach. Attackers had access to Frontier systems from May 12 to June 3, 2026, and the breach was discovered on June 18, according to the Texas Attorney General’s breach database, as reported by View from the Wing. It affected 11,482 employees and customers, and the exposed data included names, addresses, Social Security numbers, driver’s license and other ID numbers, and dates of birth. A group calling itself Scattered Lapsus$ Hunters claimed responsibility. Two proposed class actions followed in federal court in Colorado.
• The booking-system flaws. A security researcher known as BobDaHacker disclosed in June 2026 that anyone with a booking code and a last name could pull full booking records, including passport numbers, home addresses, dates of birth and Known Traveler Numbers. Both details sit unencrypted in the barcode on every boarding pass, which any barcode app can read. The researcher reported the flaws in March and said most were fixed by June 21, after public disclosure.

Neither incident has been confirmed as the source. Booking details can also leak through travel agencies, booking sites or other companies that handle reservations.

What to Do If You Got One

• Don’t click the link. To check a booking, type flyfrontier.com into your browser yourself or open the Frontier app.
• Remember the rule. Frontier says it never emails you to confirm a reservation, re-enter card details or claim a refund. Any email that does is a scam, however accurate your booking details look.
• If you entered card details, call your bank or card issuer straight away, ask for a new card, and watch your statements for charges you don’t recognize.
• If you entered your email address and a password, change that password, and anywhere else you use it, and turn on two-factor authentication.
• Expect follow-ups. Scammers who have your itinerary may also try texts or calls pretending to be Frontier. Hang up and call the airline on the number from its official website.
• Report it. In the US, you can report the scam to the FTC at ReportFraud.ftc.gov.