There are affiliate links on this page.
Read our disclosure policy to learn more.

 

Translate this page to any language by choosing a language in the box below.

American Airlines Download your ticket Email Scam - A Scammer is Phishing for Your Identity

Phishing and Vishing Identity Theft Scams
The American Airlines "Download your ticket" Scam Email
Redirects to spoofed (Fake) website: http://www.mundokinesio.com.ar/images/index.php?get_ticket=5_425628403 and other websites

You may have received an email like the one below that looks very authentic, like it came from American Airlines, or a phone call about the same subject. It is an attempt to get you to enter confidential information (typically a social security number, name, address, bank account information, etc., to allow the scammers to steal your identity and open credit cards in your name.

This email was not sent by American Airlines; American Airlines  is a victim as well. This is referred to as spoofing (making a fake email that looks legitimate, "phishing" (when by email) or "vishing" (when by telephone). If you receive an email similar to the one below, DO NOT click on the link, and do not enter any information on the forms there.

The website that the link leads to is a spoof; a fake website, not created by American Airlines. It goes to ttp://novisadpromo.info/images/index.php?request=ss00_323 or other websites (they constantly hack and change destinations), not American Airlines Download your ticket! When you enter the information they ask for, you will simply be handing the thieves the keys to your bank accounts.  That is how spoofing, phishing and vishing works.

Remember, no reputable business would send you an email or a phone call requesting your personal account information. Any such email you receive asking for this information should be considered phony and brought to the attention of the business being 'phished'.

Anytime you need to go to a website for your bank, credit card companies or other personal, financial or confidential information; do not follow a link in an email; just type their address in your browser directly (such as www.AmericanAirlines.com )

Below are actual phishing emails that started circulating in early 2008. We have put a warning over the links to the phisher's website, which is http://www.mundokinesio.com.ar/images/index.php?get_ticket=5_425628403

It is possible that the owners of the website (http://www.mundokinesio.com.ar/images/index.php?get_ticket=5_425628403) are not involved, and that their server has been hacked, but the fact remains that this is the address the scam  goes to.


----- Forwarded message -----


From: support@trabajoperfecto.net
Sent: 4/24/2013 9:53:50 A.M. Central Daylight Time
Subj: Please download your ticket

 

If you can't download ticket move this message to  "Inbox" folder.

 

    American Airlines Download your ticket

 

 

 

Customer Notification

Your bought ticket is attached to the letter as a scan document.

To use your ticket you should Download It .

 

 

Ticket

Seat

Date / Time of Departure

Flight Time

Arriving

Ref

Bag

Form of payment

Total Price

 

EH2481791319

46E/ZONE 3

27 MAY, 2013, 10:50 AM

09:35

Fremont

EF1178 ST / OK

1PC

CC

381.81 USD

 

 

 

 

Thank you for using our airline company services, AA Team.

 

American Airlines Download your ticket 2013

 


 

    American Airlines Download your ticket

 

 

 

Customer Notification

Your bought ticket is attached to the letter as a scan document.

To use your ticket you should Download It .

 

 

Electronic Ticket Number

Seat

Date / Time of Departure

Flight Time

Arriving

Ref

Bag

Form of payment

Total Price

 

EH6432989176

76E/ZONE 2

24 APRIL, 2013, 10:34 PM

09:35

Mobile

LE1798 ST / OK

7PC

CC

124.64 USD

 

 

 

 

Thank you for your attention, AA Team.

 

American Airlines Download your ticket 2013

 


 

 


What is Phishing?

Phishing is an attempt by an individual or group to solicit personal information from unsuspecting users by employing social engineering techniques. Phishing emails are crafted to appear as if they have been sent from a legitimate organization or known individual. These emails often attempt to entice users to click on a link that will take the user to a fraudulent website that appears legitimate. The user then may be asked to provide personal information such as account usernames and passwords that can further expose them to future compromises. Additionally, these fraudulent websites may contain malicious code.

Learn More About Phishing

The following documents and websites can help you learn more about phishing and how to protect yourself against phishing attacks.


Methods of Reporting Phishing Email to US-CERT

  • In Outlook Express, you can create a new message and drag and drop the phishing email into the new message. Address the message to phishing-report@us-cert.gov  and send it.
  • In Outlook Express you can also open the email message* and select File > Properties > Details. The email headers will appear. You can copy these as you normally copy text and include it in a new message tophishing-report@us-cert.gov .
  • If you cannot forward the email message, at a minimum, please send the URL of the phishing website.

* If the suspicious mail in question includes a file attachment, it is safer to simply highlight the message and forward it. Some configurations, especially in Windows environments, may allow the execution of arbitrary code upon opening and viewing a malicious email message.


For more information about phishing, see this page.

 


 

For a comprehensive list of national and international agencies to report scams, see this page.