New phishing scam targets Qantas loyalty points

Australia's national carrier Qantas has again been targeted by sophisticated airline scams, with customers lured into clicking fake links to claim unused travel credits, refunds or loyalty points.

or signup to

The latest scam text messages being sent to unsuspecting victims promise luxury prizes - including iPhones, Dyson appliances and Coles vouchers - and warn that rewards points are to expire.

The National Anti-Scam Centre says Telstra, Qantas and Coles are now the three most targeted loyalty programs.

One message reads: "Qantas: Your 12,846 Rewards points will expire at 03 February 2026.GO get your gift before they're gone!"

Victims are instructed to "Y" to activate the link or copy it directly into their browser - a tactic designed to bypass phone security systems and harvest personal details.

A Qantas spokesperson said the airline was aware of the scam and had reported it to authorities.

"These messages often direct people to websites that closely resemble our official login pages," the spokesperson said.

According to fraud prevention firm Accertify, improved detection has cut overall airline fraud by 30 per cent since early 2025.

However, criminals are now shifting to personalised attacks aimed at individual travellers, particularly in Australia and the Asia-Pacific.

A report by professional services firm EY, released in December 2025, found loyalty points have become a "prime target", treated by criminal networks as a form of "shadow currency" that can be converted into gift cards or flights and resold online.

Because many travellers check their loyalty accounts infrequently, scammers can drain points undetected for weeks or even months, exploiting security gaps across airline partner networks, the report found.

The National Anti-Scam Centre says phishing - where criminals impersonate trusted organisations to steal personal information - is becoming increasingly common.

"Criminals exploit well-known and trusted brands to deceive people into handing over bank details, passwords and credit card information," a spokesperson said.

The centre urged Australians to "stop and check" before responding to unexpected messages.

"Never provide personal or financial information through links or unsolicited calls," a spokesperson said. "Always verify using official details you find yourself."

In 2025, phishing scams were the second most reported scam type in Australia after investment fraud, according to the centre.

Australians lost $31.1 million to phishing scams in 2025, with more than 65,000 cases reported and average losses of around $2000 per person.

Carla Mascarenhas is a journalist with Explore Travel and The Senior. She specialises in deep issues affecting Gen X and beyond, and the latest in travel news. her on carla.mascarenhas@austcommunitymedia.com.au

Loyalty points emerge as 'shadow currency' for cyber criminals.

Pho, peace and plunge pools - the luxury stay ticks all the boxes.

Plus, three other things Explore is loving this week.

A popular getaway spot has been thrust into the spotlight thanks to the popular reality TV show.

No other Australian location made the top ten on the global list.