Phishing

Members
Log In

Phishing occurs when an individual or a bogus organization attempts to solicit your personal information under the disguise of SIA. Sensitive information such as your usernames, passwords, bank account numbers and credit card numbers are wrongfully obtained and used for illegal purposes, for example, credit card fraud.

How is phishing usually carried out?

Phishing is usually carried out over two main channels: emails and websites.

Websites
Fraudsters can create a website using a fake URL that looks similar to SIA’s. They use the organization’s logos and put up false graphics and email addresses to mislead you into thinking that the website is authentic.

Emails
The widespread usage of email provides another convenient tool to trick you into surrendering your personal details. This is done by providing a hyperlink to a fake website or by attaching a form to the email.

Example
An email that claims to be sent from SIA may ask you to visit a website provided to update your personal particulars for a variety of reasons. When you click the link, you are directed to a spoof website where you are asked to enter sensitive information. This website may use the same color scheme and layouts as the actual SIA website, but these websites are, however, not to be trusted.

Why does the spoof website look the same as the SIA website?

It is a relatively simple task to re-create the look and feel of the organization’s website. The logos and graphics are easily available on the Internet and can even be copied from the actual website itself.

How can I prevent myself from falling victim to phishing?

Never follow any links provided in emails that look suspicious. The company does not have a policy of updating customer records via email.
Always type in the URL of the website into the browser’s address bar, instead of following links.
When in doubt, open another browser window, type in the URL http://www.singaporeair.com and see if they are the same.
Avoid sending personal information and financial details over the Internet, unless there is a lock icon on the status bar that indicates that this is a secure site.

How do I report a spoof website or suspicious email?

If you suspect that you are being phished, please do not hesitate to report it. You may submit an incident report through our feedback form and appropriate action will be taken. Your help will go a long way into ensuring the security of other Internet users like yourself.