"Requested united.com information"
 

Twice in the last week I have received emails from UA with the subject line above. In each of the emails, UA says I've requested a new password and sends me a temporary password to access my MP account so that I can change my password.

Problem is, I haven't requested a new password. I've been careful not to click on any embedded links in the email (to avoid a potential phishing scam)....I've just logged onto united.com and the temporary password does work. Anyone else have this happen?

Someone is using the "forgot password" link with your MP number or email address.

It could be someone making a simple typo in the MP number, or a attempt by a very junior hacker to get your information.

Either way, it's nothing to worry about, as long as nobody except you has access to your email.

Agreed -you could forward them into the .bomb black hole but not much is likely to come back out.

Are you sure the emails are coming from United?
Take a look at the header of the email and see where it is originating from. Or hit reply and see what domain it's coming from.

Why would the temporary passwords work if they weren't coming from United??

The domain is easily spoofed. And if its phishing, it probably originates from a compromised computer in a botnet.

Or, as has happened before, someone at UA testing something on the live system.