Qantas is investigating a series of targeted WhatsApp phishing messages affecting Qantas Hotels customers. The scam mimics official booking channels to request payment details, prompting the national carrier to urge passengers to ignore suspicious communications.
Qantas Hotels Phishing Scams Target Customers on WhatsApp
Australia’s national carrier launched an investigation after customers reported receiving fraudulent WhatsApp messages regarding hotel reservations, according to statements reported by Cyber Daily. The airline stated that neither Qantas Hotels nor its accommodation partners will ever ask customers to verify bookings or provide personal details via WhatsApp. The carrier advised affected individuals to check bookings exclusively through Qantas.com or the official Qantas mobile application.
According to Qantas, the company never requests passwords from passengers and advises all travelers to avoid sharing personal information outside official airline channels. The current WhatsApp incidents follow a 2025 social engineering campaign by a Scattered Lapsus$ Hunters threat group that compromised data belonging to more than five million Qantas customers. However, according to published reports, no specific threat actor has been identified yet in relation to the current WhatsApp phishing messages.
According to a hotel spokesperson speaking to the ABC, several guests at Capella Sydney received suspicious WhatsApp messages requesting payment and credit card details in connection with their reservations. Capella Sydney confirmed that the messages did not originate from the hotel.
Frequently Asked Questions
How can I identify a legitimate message from Qantas Hotels?
According to Qantas, the airline and its accommodation partners will never ask you to verify bookings or provide personal details via WhatsApp. All official booking management takes place through Qantas.com or the official Qantas app.
What should I do if I receive a suspicious WhatsApp message about my reservation?
Qantas advises customers to ignore suspicious messages claiming to be from a hotel and to check the status of their bookings directly through official airline channels.
Were customer credit card details compromised in this WhatsApp incident?
Airlines and hotels have confirmed that the WhatsApp messages are fraudulent attempts originating outside their official systems, though investigations into the origin of the phishing attempts remain ongoing.
Related reading