🔥 Trending KrisFlyer Email Scam Alert: What You Need to Know

The KrisFlyer phishing scam refers to fraudulent attempts by malicious actors to trick Singapore Airlines (SIA) customers, particularly those enrolled in its KrisFlyer frequent flyer program, into revealing personal and financial information ¹²³. These scams often impersonate official communications from Singapore Airlines or KrisFlyer, using deceptive tactics to gain unauthorized access to accounts or steal money.

Key Characteristics and Examples of KrisFlyer Phishing Scams

Phishing scams targeting KrisFlyer members can manifest in several forms, but they generally share common characteristics aimed at exploiting trust and urgency.

Fraudulent "KrisFlyer Anniversary Draw" Emails

One prominent example, widely reported in July 2026, involves emails claiming to be part of a "KrisFlyer Anniversary Draw" ¹²³.

• Deception: These emails falsely suggest that recipients have won or are eligible for a prize from an anniversary draw related to the KrisFlyer program ¹³.
• Objective: The goal is to entice users to click on malicious links embedded within the email, which then lead to fake websites designed to harvest sensitive information such as KrisFlyer login credentials, personal details, or credit card information ³.
• Official Warning: Singapore Airlines issued a warning through its Facebook post on July 21, 2026, cautioning customers about these fraudulent emails ².

Fake KrisFlyer Miles Expiry Emails

Another common tactic involves emails falsely notifying users about expiring KrisFlyer miles ⁴⁵.

• Deception: These emails create a sense of urgency by claiming that a significant amount of KrisFlyer miles is about to expire, prompting the recipient to act quickly to "save" them ⁴.
• Financial Loss: A victim in Singapore reportedly lost S$18,460 due to such a scam in April 2026. This incident involved a fake KrisFlyer miles expiry email, a counterfeit portal, and subsequent phishing calls ⁴⁵. The victim was tricked into providing personal details and financial information, leading to unauthorized transactions ⁵.

Impersonation of Official Channels

Scammers often go to great lengths to make their phishing attempts appear legitimate ⁶.

• Fake Websites: They create websites that mimic the official Singapore Airlines or KrisFlyer portals, often with slight variations in the URL that may go unnoticed by an unsuspecting user ⁴.
• Fake Social Media Accounts: Malicious actors may also create fake social media accounts that impersonate SIA to spread these scams or interact with victims ⁶.
• SMS and Email: While official One-Time Passwords (OTPs) from Singapore Airlines come from "SQbooking" via SMS and "Singapore Airlines" via email, scammers try to replicate these to gain trust ⁸.

How to Protect Yourself

Singapore Airlines advises customers to be vigilant and follow good cybersecurity practices ⁶.

• Verify Sender: Always check the sender's email address and domain. Official communications from Singapore Airlines will come from legitimate domains.
• Hover Over Links: Before clicking any link, hover your mouse over it to see the actual URL. If it looks suspicious or doesn't match the official Singapore Airlines website (singaporeair.com), do not click it.
• Do Not Share OTPs: Singapore Airlines emphasizes that OTPs (One-Time Passwords) should never be shared with anyone ⁸. Official OTPs are sent to registered contact details and are for your eyes only ⁸.
• Direct Website Access: Instead of clicking links in emails, directly type the official Singapore Airlines website address (singaporeair.com) into your browser to access your KrisFlyer account or check for promotions.
• Report Suspicious Activity: If you receive a suspicious email or SMS, report it to Singapore Airlines immediately ⁶. SIA investigates such incidents and reports scam sites and impersonating social media accounts to the relevant authorities for removal ⁶.
• Be Skeptical of Unsolicited Offers: Be wary of emails or messages promising prizes, draws, or urgent actions, especially if you did not participate in any such event ¹²³.