Originally Posted by
zoey1996
It has a zip attachment. Is this possibly legit but misdirected, or is it a phishing, malware, or other nefarious scheme? I will be sending an e-mail to aa to report this as I have not purchased this ticket and think it may be a fraud or scam of some sort, but if anyone has any light to shed, I'd appreciate your thoughts.
Good instinct. Definitely fraud.
When suspicious, I normally take a chunk of the text (such as "Your bought ticket is attached to the letter as a scan document. You can print your ticket.") and pop it into a search engine. In this case, all sorts of sites warning about spoof/scam popped up.
Another place to check is the AA website, which lists known scams floating around:
http://www.aa.com/i18n/urls/phishingEmails.jsp