Advisory on phishing scams and good cybersecurity practices

The protection of our customers’ personal data is of utmost importance to us. Singapore Airlines (SIA) wishes to advise customers to be cautious of phishing websites, emails, text messages, social media accounts, and phone calls that claim to be from SIA.

Some examples of scams include:

• Fake hotline numbers posted on the Internet. For example, fraudulent contact details listed on Google maps, wiki pages, and community forums. Customers who require assistance are advised to only contact the hotline numbers found on the official SIA website.
• Individuals impersonating SIA through calls or on messaging apps. For example, they may impersonate an SIA staff and request for customers’ personal, flight, or credit card details. Alternatively, they may approach the public with fraudulent job offers. Do note that all available job vacancies at Singapore Airlines are advertised at our official Careers portal, as well as on LinkedIn.
• Social media accounts and email accounts that impersonate SIA and publish fake advertisements or requests, approaching members of the public for their personal data or bank card details, requesting for them to click on a phishing link or open an email attachment.

To appear more authentic, such callers are able to modify their caller ID to imitate our official telephone numbers, or modify their email addresses to imitate our official SIA email accounts.

To protect our customers from fraudulent text messages, SIA has registered our SenderIDs with Singapore’s SMS Sender ID Registry. Customers with a Singapore country code (+65) contact number will be able to verify if the text messages they receive are from the airline as potential scam text messages from unauthorised senders will be marked as ‘Likely-SCAM’.

We take such matters seriously and investigate them when they are brought to our attention. When customers alert us to such incidents, we conduct a thorough investigation to check if their booking or KrisFlyer accounts are impacted. Where necessary, scam sites and social media accounts that reflect the wrong contact details or impersonate SIA are reported to the relevant authorities and parties for removal.

Customers are also strongly encouraged to add an additional layer of security to flight bookings made via the Singapore Airlines website or SingaporeAir mobile app by enabling the two-factor authentication (2FA) feature. When enabled, customers will be provided with a time-sensitive, randomly-generated one-time password (OTP) to verify their identity before they can securely access passenger details, and change or cancel their flight bookings. More details can be found here.

Singapore Airlines also strongly advises recipients to exercise discretion, especially when revealing personal data to unverified sources. Recipients should verify emails, text messages, phone calls, social media accounts, and websites if they have any doubts, as well as lodge a police report. Should recipients wish to verify such calls, text messages or emails, social media accounts, or report a fake SIA website, please send us the details via this link and we will get back to you as soon as possible.

We would like to advise customers to take guidance from the tips provided by the Cyber Security Agency of Singapore. This includes using different passwords for different websites, which helps to prevent third parties from using credentials that were previously compromised on non-Singapore Airlines Group websites to access their Singapore Airlines accounts.

Customers may visit this link to find out more about how they can keep their personal data safe. For more information on scams in Singapore, please visit https://www.scamalert.sg/.

Updated on 6 June 2024, 0800hrs (GMT+8)
First posted on 18 July 2017, 1930hrs (GMT+8)