Protect your account

Email protection

Do

• Beware of fraudulent emails that claim to have been sent by Cathay Pacific
• Be cautious when opening emails and their attachments, especially when receiving emails from strangers or suspicious email addresses
• Be cautious of any suspicious email address, e.g. incorrect grammar/ spelling, misleading domain name
• Open email attachments with extreme care. Always scan the attachment with “pdf”, “exe”, “bat”, “.vbs”, “.js”, “.com” extensions
• Beware of email scams. If you receive any suspicious emails from business partners, you should confirm the identity of the purported sender
• Keep a copy of the entire spam / phishing email in its original format (including any attachments) for reporting or if requested for investigation

Don’t

• Do not click through URL links from untrusted sources or emails such as spam emails to avoid being re-directed to fraudulent websites which appear to be legitimate
• Do not reply to any email messages from unknown senders
• Do not provide your personal details to an unknown source

To report a phishing/suspicious email claiming to be from Cathay Pacific, you can forward the message to us at reportphishing@cathaypacific.com. Make sure to include the complete header information of the suspicious message.

While this email address is monitored, you may not receive an individual reply to your report beyond an auto-acknowledgement.

Identify potential phishing emails

Phishing attacks are among the top tactics by hackers to gain sensitive information from users and continue to rapidly evolve to target their victims. Here are some signs to look out for:

• The sender’s email address doesn’t look right
  For example, if you receive an email from @cathypcific.com instead of @cathaypacific.com, do not open the email.
• The email asks you for confidential information
  We will never ask for your banking, credit card details or passwords over email, messages or calls. Never click on any suspicious links in an email.
• The email requires you to open an attachment for an activity you did not request for
  The sender may claim that an attachment contains important information on your booking or flight. Sometimes, the attachment may have a file extension you may not be familiar with. When in doubt, don’t open the attachment as it may be malware, a malicious software or virus. Contact us instead to verify its authenticity.
• Convincing phrases: “You’ve just won a prize!”
  If it comes as a surprise to learn that you’ve just won a lucky draw you don’t remember ever taking part in, contact us to verify its authenticity.
• The email is poorly put together
  If the email’s visuals look hastily put together, and are filled with spelling and grammatical mistakes, it’s likely to be the work of a cybercriminal.
• Website link to log in is not secure
  Avoid logging in to unsecured websites (i.e. URLs which do not start with HTTPS) and do not disclose any sensitive confidential information there.

Frequently Asked Questions