Qantas scam emails and texts: how to spot the fake refund or points offer
Quick answer
Scammers pretend to be Qantas in emails and texts offering refunds, gifts or expiring points. Qantas says it doesn't ask for PINs or passwords, including one-time passwords, by text or email. Don't click the link; check in the Qantas app or on its website, and report it to Scamwatch.
- Comes by
- Email, Text, Phone call, Social media
- Pretends to be
- Qantas
- First reported
- Latest official alert
- (Scamwatch)
- Last updated
How it works
Scamwatch, run by the Australian government, warned on 9 February 2026 that scammers were impersonating Qantas in emails and text messages. They use Qantas logos and branding and create urgency so you act without checking.
The message urges you to click a link to claim a refund, claim a gift or redeem points that are about to expire. The link leads to a fake website built to steal whatever you enter. Qantas says it first identified these scams in August 2025.
You don't need to be a Qantas customer to get one. Scamwatch says people who know or suspect they've been in a data breach may be at greater risk. Qantas also warns of scammers posing as recruiters (October 2026) who approach people about fake jobs using details from public professional profiles, then ask for identity documents, banking details or payments.
Red flags
- An unexpected offer of a refund, gift or reward
- Frequent flyer points that are "about to expire"
- A sender name, email address or web address that looks slightly different from Qantas's real one
- A text showing as 'Unverified' as the sender
- A link that asks for login details, a PIN, a password or card details
- A recruiter approach about a senior Qantas job with an unusually attractive salary
Example message
Qantas: your points are about to expire. Claim your reward now at [link] to avoid losing them.
What to do
- 1
Don't click or reply
Don't open links or attachments or give information. Qantas doesn't ask for PINs or passwords, including one-time passwords, by text or email.
- 2
Check through the official route
Open the Qantas app, visit the Qantas website, or call a number you've found yourself.
- 3
Report it to Scamwatch
Include the original email, URLs or screenshots if you can, then delete the message. Qantas also has a reporting form on its scams page.
- 4
If you gave card details, call your bank
Contact your bank or card provider as soon as possible, and monitor your statements.
- 5
If you gave other personal details, get help
Change affected passwords. Scamwatch points Australians who have given personal information to IDCARE, and Qantas lists it for Australian and New Zealand residents. If your Frequent Flyer account may be compromised, use the contact details on Qantas's own scams page.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers don't pick numbers at random for the convincing ones. Names, phone numbers, addresses and email addresses are easy to buy from data brokers and look up on people-search sites, and breached databases circulate among scammers. Serus finds the data brokers and people-search sites that list you where you live and removes you from them, and alerts you when your details show up in a breach, so fewer scammers can reach you with a message that sounds personal. Our guides on data brokers and data breaches explain how it works.
Official alerts
- Scam alert: Qantas impersonation scam · Scamwatch
Frequently asked
Is Qantas behind these emails?
No. Scammers impersonate Qantas. Qantas is warning customers about it on its own scams page.
How can I tell a real Qantas text?
Australia now requires businesses that use a branded Sender ID on SMS to register it. Qantas says its messages show a name like 'Qantas' or 'QFF'. A message showing as 'Unverified' may be a scam.
I'm not a Qantas customer. Why did I get it?
Scamwatch says anyone can be targeted. You don't need to be a customer or Frequent Flyer member.
What if I clicked the link?
Don't enter anything further. Change passwords if you did, watch your accounts, and report it to Scamwatch.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
