Skip to content
Scammers Exploit Airline Complaints via Fake Support Accounts

Scammers Exploit Airline Complaints via Fake Support Accounts

First seen 18 Sep 2026, 09:54 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster September 18, 2026 at 10:26 UTC
  • Threat actors impersonate airline customer support on social media.
  • Thousands of fake accounts identified, with hundreds created daily.
  • Scammers shift conversations to private channels to collect sensitive information.

Check Point's investigation reveals a coordinated social engineering campaign targeting airline customers. Scammers monitor social media complaints and impersonate customer support accounts to lure victims. Thousands of fake accounts were identified across platforms like X and Instagram, with new ones appearing daily. The scammers shift conversations to private channels, asking for personal information under the guise of offering refunds or compensation. Victims are convinced their claims have been approved, leading to the collection of sensitive data and financial information. The campaign remains active and evolving, with researchers documenting multiple scam variations. This highlights a significant challenge in external attack surface management as threat actors exploit public customer interactions.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2024-01-01
Impersonation accounts created
Many of the identified fake support accounts were created in 2024, with hundreds appearing daily.
Blog.Checkpoint
2026-09-16
Check Point investigation published
Check Point released findings on a coordinated scam targeting airline customers through social media.
Blog.Checkpoint
2026-09-18
IT-Online report published
IT-Online reported on the same scam, corroborating Check Point's findings and detailing the methods used.
It-Online.Co.Za

More articles in this cluster (2)

Following this threat?

Track X in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed