Airline and transport

Scams that follow your passengers all the way to the gate.

Fake booking sites, points scams, fake support accounts during delays and fake cabin crew jobs all trade on an airline's name. Unphish finds them across the web, social media, apps and messaging, and gets them taken down.

Threat departuresExample board
TimeThreatWhereStatus
  1. 09:12Fake points offersolsticeair-points.topWebsiteRemoved
  2. 09:40Fake support account@SolsticeAir_HelpXRemoved
  3. 10:05Cabin crew job ad"Hiring now, no experience"TelegramRemoved
  4. 10:31Delay refund SMSsolstice-refund.clickTextReported
  5. 11:02Copied appSolstice Air 7.4 APKAPK siteRemoved
  6. 11:18Booking data for salePrivate channelTelegramChecking
99%taken down

Of the threats we pursued for airline and transport brands, January to June 2026.

The passenger journey

Where scammers meet your passengers.

Scams turn up at every step of a trip. Pick a stage to see what they look like and where they lead.

SponsoredSolstice Air Official | Cheap Flights 70% Offsolstice-air-deals.comBook direct and save. Call 1800 xxx 412 for 24/7 help.

Search and book

Fake booking sites, ads and phone numbers.

Scammers buy search ads, build lookalike booking sites and plant fake “customer service” numbers where travellers search for help. Passengers pay for flights that don’t exist or hand over card details.

  • Lookalike domains with deals or official in the name
  • Search ads that outrank your own site
  • Fake support numbers in PDFs and forums
Text messageSolstice Rewards: your 48,000 points expire tonight. Swap them for a gift card at solsticeair-points.top

Loyalty

Points, rewards and gift card scams.

Frequent flyer points are worth real money, so they’re the most common bait we see. Messages say points are about to expire, or can be swapped for gift cards, and lead to sites that steal logins.

31%of the threats we pursued for airline and transport brands used points, rewards or gift cards as bait.
SA
Solstice Air 7.4 APKapk-mirror-store.netBoarding pass, check-in and points. No Play Store needed.

Check-in and travel

Fake check-in links and copied apps.

Texts about check-in, seat changes or baggage fees link to fake pages, and copies of airline apps turn up on download sites. Both collect logins, passport details and card numbers.

  • “Complete check-in” texts with odd links
  • Baggage or seat fees requested by text
  • Your app on unofficial download sites
Jess@SolsticeAir flight cancelled again and no one is answering
Solstice Air Care@SolsticeAir_HelpSo sorry Jess! DM us your booking ref and phone number and we’ll process your refund today.

Delays and disruption

Fake support accounts that reply first.

When flights are delayed or cancelled, fake “support” accounts watch for complaints and reply before the real airline can. They ask for booking details and payment to “process a refund”.

21%of the threats we pursued posed as customer service.
Job postCabin Crew, Solstice AirImmediate start. No experience needed. Japanese speakers wanted. Pay a $180 uniform and training fee to secure your place.

Careers

Fake cabin crew and pilot job ads.

Airline jobs are dream jobs, which makes them easy bait. Fake recruiters post on social media and job boards, then ask for fees, passport copies and bank details.

  • Fees for training, uniforms or visas
  • Interviews only on WhatsApp or Telegram
  • Ads aimed at speakers of one language
Private channelDaily LeaksSOLSTICE AIR 2026 | frequent flyer members, emails, phones. Sample below.

Behind the scenes

Leaked data and stolen logins.

Customer and loyalty data is advertised on breach forums and private Telegram channels, then used to make scam messages more convincing. Staff logins are sold the same way.

  • Your name on leak and breach posts
  • Samples with member numbers or bookings
  • Staff or contractor logins for sale

How it works

Up and running in three steps.

solsticeair.com@SolsticeAirSolstice Air appSolsticeRewardsLetter of authority ✓

Step 1

Tell us what’s yours

Share your brand names, official domains, social accounts and app listings, plus a letter of authority so we can act on your behalf.

  • Web and domains
  • Social media
  • App stores
  • Messaging

Step 2

We watch around the clock

We monitor the web, social media, app stores and messaging channels for fakes. Tell us about upcoming sales or disruption and we’ll watch more closely.

solsticeair-points.topPoints phishing site
Successfully suspendedEvidence and outcome in your portal

Step 3

We take them down

Every find is checked, then reported to the platform, host or registrar with evidence. You see each case and its outcome in the Unphish portal.

By the numbers

What we see for airline and transport brands.

Threats we pursued for airline and transport clients, January to June 2026.

99%

of the threats we pursued for airline and transport brands were taken down

31%

used points, rewards or gift cards as bait

21%

posed as the brand’s customer service

47%

of the scam domains weren’t on .com, with .top the most used ending

Where we found them

  • Social mediaFake support and promo accounts43%
  • Phishing and scam websitesPoints, refunds, bookings39%
  • Content and filesPDFs, documents, listings8%
  • Everything elseApps, data leaks, messaging10%

Airline scams don’t live in one place. A single campaign can run a fake site, a fake support account and a text message at the same time, so we watch and remove them together.

Where fake accounts showed up

  • Facebook44%
  • X37%
  • Instagram8%
  • Telegram8%
  • Other3%

Share of the social media threats we pursued for airline and transport clients. Most were fake support or promo accounts.

The bigger picture in Australia

$2.18bn

lost to scams by Australians in 2025

65,361

phishing reports to Scamwatch, the most reported scam of 2025

7,000+

suspected Facebook scam links referred to Meta by the National Anti-Scam Centre

Source: ACCC, Targeting Scams report on 2025, released March 2026.

Unphish figures: cases for airline and transport clients, January to June 2026. Takedown rate excludes cases closed for other reasons, such as at the client’s request. Figures are rounded.

When it peaks

Scams follow the travel calendar.

Scam campaigns copy whatever an airline is promoting or dealing with at the time. Busy, stressful moments for passengers bring a wave of fakes built to match them.

  • Fare sales and promotionsFake deals and lookalike booking sites copy the offer.
  • Holidays and peak travelMore trips mean more fake check-in and baggage messages.
  • Delays and cancellationsFake support accounts reply to frustrated passengers first.
Threats we pursued, by monthJan to Jun 2026
+50%more threats a month by May and June than in January.

Your Unphish portal

Every fake, and where it’s up to.

Fake sites, accounts and job ads land in one threat feed. Approve a takedown in a click, then follow each case until it’s gone.

Threat FeedSolstice Air · last 30 days
Example data

Pipeline health

  • With you
  • In enforcement
  • Verifying
  • Resolved
  • P1
    x.com/SolsticeAir_HelpFake support account · X
    Awaiting review
  • P1
    solsticeair-points.topPoints phishing site · Web
    In enforcement
  • P2
    facebook.com/solstice.crew.hiringFake cabin crew jobs · Facebook
    Suspended
  • P3
    docs-share.net/solstice-help.pdfFake support number · PDF
    Verifying

Confidence

Illustration with example data. Solstice Air is a fictional brand.

Case study

How we protected one airline group across six fronts.

Case study

An airline group

Industry
Airline, loyalty and travel
Period
January to June 2026
Covered
Web, social media, PDFs, job ads and private channels

Client name withheld to protect confidentiality.

01 · Before

The challenge

Scammers were using the group’s name everywhere passengers look: fake points and gift card offers, fake customer support accounts and phone numbers, cabin crew job ads, and posts selling customer data.

02 · After

What we did

We monitored each channel, checked every find, and pursued takedowns with the platforms, hosts and registrars involved, linking related sites and accounts so they came down together.

6threat types covered
5channels watched
96–100%taken down, per threat type

The results, threat by threat

Figures are rounded.

Who it’s for

Built for the teams who look after passengers.

Every team sees different fakes. We find and remove them all.

Loyalty and rewards

Fake points offers and gift card swaps target your members.

We remove

  • Fake points sites
  • Gift card swaps
  • Fake member logins

Customer care and social

Fake support accounts and numbers reach passengers first.

We remove

  • Fake support accounts
  • Fake phone numbers
  • Refund texts

Security and fraud

Phishing kits, leaked data and stolen staff logins.

We remove

  • Phishing sites
  • Leaked data
  • Staff logins for sale

People and recruitment

Fake job ads charge candidates for training and uniforms.

We remove

  • Fake crew job ads
  • Fake recruiters
  • Copied careers pages

Legal, brand and comms

Your name and logo used without permission, with evidence for every action.

We remove

  • Logo misuse
  • Fake travel agents
  • Unauthorised brand use

Explore by threat

Every threat airlines face, explained.

For your passengers

Help passengers spot a fake airline.

Two short notes you can adapt for your website, app, booking emails or support replies. One shows passengers how to tell you apart from the fakes. The other tells them what to do if they’ve been caught.

The copied version leaves blanks for your airline name and official details.

Solstice AirTravel safety notice

How to spot a fake Solstice Air

  • Only book and check in at solsticeair.com or in the Solstice Air app.
  • We’ll never ask for your booking reference and card details in a social media message.
  • Points can only be used in your account. We never swap them for gift cards by text or email.
  • Real jobs are only at solsticeair.com/careers, and we never charge for training or uniforms.
  • Delay and refund messages always send you to solsticeair.com.

Seen something suspicious? Report it at solsticeair.com/report

Example
Solstice AirCustomer care

Think you’ve been scammed?

  1. Stop replying and don’t click any more links.
  2. Change your password and turn on two-step login.
  3. Call your bank if you paid or shared card details.
  4. Contact IDCARE if you shared passport or ID details.
  5. Tell us what happened, so we can get it taken down.

Then book and manage your trips through our official app or website.

Example

FAQ

Airline and transport questions, answered.

Why do scammers target airlines?

Airlines have trusted names, millions of customers, valuable loyalty points and passengers who are often in a hurry or stressed. Fares, refunds and points all involve money, so a convincing fake can be paid quickly.

What are the most common airline scams?

In our cases, the most common are fake points and rewards offers, fake customer support accounts and numbers, phishing sites that copy booking and login pages, fake cabin crew job ads and copied airline apps.

Do you work with transport brands other than airlines?

Yes. Taxi, rideshare, rail, bus and travel brands face the same fake booking sites, fake apps and fake support lines, and we monitor and take them down the same way.

Can you remove fake support accounts on X and Facebook?

Yes. We report impersonation accounts to each platform with evidence that they aren't yours, and escalate until they're removed. Every fake support account we pursued for one airline group was disrupted.

How long does it take to take down an airline scam?

It depends on the platform, the host and the evidence. Social media accounts and phishing sites are often removed quickly, while sites on offshore hosts can need escalating.

Do you watch for scams during sales and disruptions?

Yes. Monitoring runs around the clock, and you can tell us about upcoming sales, promotions or disruption so we watch more closely for scams that copy them.

What do you need from us to get started?

Your brand names, official domains, social accounts and app listings, plus a letter of authority so we can act on your behalf. We handle the monitoring, evidence and takedowns from there.

Solutions for airlines

Try it

Real or fake?

Five messages a Solstice Air passenger might see. The airline only uses solsticeair.com, its official app and its verified social accounts. Which would you trust?

The quickest check: real airline messages send you to the airline’s own website or app, and never ask for payment or booking details in a DM.

See what's using your airline's name.

Book a demo and we'll show you the fake sites, accounts and ads targeting your passengers, then take them down.