Go Back   FlyerTalk Forums > Miles&Points > Airlines and Mileage Programs > Alaska Airlines | Mileage Plan
Sign in using an external account

Reply
 
Thread Tools Search this Thread
Old Jul 2, 12, 10:21 am   #1
 
Join Date: Jun 2004
Location: Anchorage, AK
Programs: AS MVPG75K, AA, DL, HH-G
Posts: 5,538
Wierd credit message-(possible phishing?)

Logged on to my email account this morning and found two messages from AS. The first titled "Your Credit Certificate from Alaska Airlines" told me that there would be a second message containing a PIN to be able to open the certificate. The second one is labeled "PIN for your alaskaaair.com Credit Certificate".

When I opened the message, the credit is for a whopping $0.40. Yup, forty cents.

Both sites look totally legitimate but for forty cents I am not going to open up my account to deposit it. Something is phishy here.
Anyone else get one of these?
__________________
Outside of a dog, a book is man's best friend
Inside of a dog, it's to dark to read
BOB W is offline   Reply With Quote
Old Jul 2, 12, 11:07 am   #2
 
Join Date: Dec 2005
Posts: 996
Lots of airline phishing going on. Some given on DL site. I would not have opened it.
KenfromDE is offline   Reply With Quote
Old Jul 2, 12, 11:52 am   #3
 
Join Date: Jun 2004
Location: Anchorage, AK
Programs: AS MVPG75K, AA, DL, HH-G
Posts: 5,538
Quote:
Originally Posted by KenfromDE View Post
Lots of airline phishing going on. Some given on DL site. I would not have opened it.
I did not open my AS account so there is no way they could access the info there.
__________________
Outside of a dog, a book is man's best friend
Inside of a dog, it's to dark to read
BOB W is offline   Reply With Quote
Old Jul 2, 12, 2:22 pm   #4
 
Join Date: Dec 2005
Posts: 996
I may be wrong but I was under the impression that just opening a bad attachment can cause big problems. Doesn't sound like it was an attachment though.
KenfromDE is offline   Reply With Quote
Old Jul 2, 12, 6:43 pm   #5
 
Join Date: Jun 2004
Location: Anchorage, AK
Programs: AS MVPG75K, AA, DL, HH-G
Posts: 5,538
Quote:
Originally Posted by KenfromDE View Post
I may be wrong but I was under the impression that just opening a bad attachment can cause big problems. Doesn't sound like it was an attachment though.
No, there was no attachment. It contained a link to the site to enter the PIN.

Smelled phishy to me too...
__________________
Outside of a dog, a book is man's best friend
Inside of a dog, it's to dark to read
BOB W is offline   Reply With Quote
Old Jul 2, 12, 8:01 pm   #6
Moderator: Information Desk, Alaska Mileage Plan; FlyerTalk Evangelist
 
Join Date: Mar 2004
Location: MDT (but usually ZFV or PHL) / Amtrak: MJY
Programs: UA 1K, AS, AA, AGR S, HZ PC, Nat'l Exec, Costco Exec, NPS Passport
Posts: 19,753
If so, that's a really well-constructed phishing scam, because that's exactly the same procedure AS uses when sending someone a gift certificate or GARR credit. Check the email address: it should be from Certificates@alaskagiftcerts.com. The "View Certificates" button (if you hover above it) should read https://www.alaskaair.com/certificat...t.aspx?gccode= followed by a bunch of code. If the link doesn't match (i.e. it's something like http://alaskagiftcertificates.xhrt.ru), then it probably is a phishing scam, and definitely delete.

That all said, I probably wouldn't bother with any of this over 40 cents (although I would truly doubt a phisher would put out a 40-cent certificate, since most recipients would probably ignore that--they'd be more likely to put an irresistible amount like $100 or something), but a perfectly safe way for you to obtain this credit (if it is valid) would be to open your MyAccount on your own (i.e. not through the link in the email--use http://www.alaskaair.com/myaccount), go to your MyWallet, and choose the option to deposit a gift certificate and enter the code. If you're worried about malicious code in the email doing something nefarious, print the certificate out (or copy/paste the code and PIN into a plain-text Notepad document) and sign in to your account and enter the codes after closing the email. Simply entering a code into your MyWallet--even if it's an invalid one generated by a phisher--won't do anything to give anyone access to your account. The danger is clicking a link in the email and not recognizing that it's a redirect to a nefarious site where you might reveal your login information (or, less commonly, opening an attachment that would compromise your system).

Last edited by jackal; Jul 2, 12 at 8:06 pm.
jackal is offline   Reply With Quote
Old Jul 2, 12, 8:12 pm   #7
 
Join Date: Jun 2004
Location: Anchorage, AK
Programs: AS MVPG75K, AA, DL, HH-G
Posts: 5,538
Quote:
Originally Posted by jackal View Post
If so, that's a really well-constructed phishing scam, because that's exactly the same procedure AS uses when sending someone a gift certificate or GARR credit.
But why would AS bother with a 40 cent cert? It just seems wierd.
__________________
Outside of a dog, a book is man's best friend
Inside of a dog, it's to dark to read
BOB W is offline   Reply With Quote
Old Jul 3, 12, 12:48 am   #8
Ambassador: Alaska Airlines
 
Join Date: Feb 2008
Location: ANC, SAP
Programs: AS MVP Gold, Priority Pass
Posts: 1,453
Quote:
Originally Posted by BOB W View Post
But why would AS bother with a 40 cent cert? It just seems wierd.
If it is AS, I'd have to guess that it's somehow automated - perhaps you did a schedule change that changed an obscure tax or fee, and now an automatic audit discovered a $0.40 error in your favor...
__________________
My flight memory
ANC RED-EYE is offline   Reply With Quote
 
 
Reply

Bookmarks


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off
Forum Jump


All times are GMT -6. The time now is 11:54 am.