Identify potential phishing emails

Phishing attacks are among the top tactics by hackers to gain sensitive information from users and continue to rapidly evolve to target their victims. Here are some signs to look out for:

The sender’s email address doesn’t look right
For example, if you receive an email from @cathypcific.com instead of @cathaypacific.com, do not open the email.
The email asks you for confidential information
We will never ask for your banking, credit card details or passwords over email, messages or calls. Never click on any suspicious links in an email.
The email requires you to open an attachment for an activity you did not request for
The sender may claim that an attachment contains important information on your booking or flight. Sometimes, the attachment may have a file extension you may not be familiar with. When in doubt, don’t open the attachment as it may be malware, a malicious software or virus. Contact us instead to verify its authenticity.
Convincing phrases: “You’ve just won a prize!”
If it comes as a surprise to learn that you’ve just won a lucky draw you don’t remember ever taking part in, contact us to verify its authenticity.
The email is poorly put together
If the email’s visuals look hastily put together, and are filled with spelling and grammatical mistakes, it’s likely to be the work of a cybercriminal.
Website link to log in is not secure
Avoid logging in to unsecured websites (i.e. URLs which do not start with HTTPS) and do not disclose any sensitive confidential information there.