Fraud Alert

New Phishing Emails - Confirmations and Trip Details

Below you'll find recent phishing email examples followed by important instructions. Share this important alert with everyone who has access to your GDS and read the important information regarding what you can do today and over the weekends/holidays.

1x1ccc

Example 1

New Phishing Emails - Confirmations and Trip Details

1x1ccc

Example 2*

New Phishing Emails - Confirmations and Trip Details

*Note: This example does not include all the bulleted instructions contained in the phishing email.

1x1ccc

What should you do with this information?

  • Show this email example to everyone, including full- and part-time staff, independent contractors and sub-agents.
  • Ask every employee and outside sales staff if they received this type of email and clicked the link to log into the GDS through the email. If so, take immediate action to change everyone's passwords, and refer to your GDS's website for additional instructions.
  • Advise staff to never click on a link to confirm a GDS login ID or password through an email. Always go directly to your GDS's known website.
  • If your GDS administrator's credentials were compromised, check to see if new user accounts have been created or if any user's email account information has been altered. (Always delete unknown or former user accounts immediately.)

Monitor your agency's ticketing daily, including weekends and holidays, and if you suspect unauthorized ticketing or access, immediately:

  • Void the ticket(s) through your GDS to obtain an ESAC code.
  • Notify affected carriers of the unauthorized/stolen tickets.
  • Cancel the PNR (or return segments if the outbound leg has been used).
  • Contact your GDS to report compromised IDs, PCCs, or passwords, and ask for immediate assistance to prevent additional unauthorized activity.
  • Contact ARC's fraud prevention team at fifp@arccorp.com or (855) 358-0393 for important follow-up instructions.

More on current schemes, fraud prevention and credit card transaction red flags can be found here. ARC will send more examples of suspicious emails in the future to keep you informed of the latest fraud attempts.

About ARC:
ARC powers the U.S.-based travel industry with premier business solutions, travel agency accreditation services, process and financial management tools, and powerful data analytics. In 2012, ARC settled $84 billion worth of carrier ticket transactions for more than 9,400 travel agencies with 15,000 points of sale. By providing world-class business services and products, ARC enables participating agencies and 191 carriers to focus on what's important - increasing their revenue. Established in 1984, ARC is headquartered in Arlington, Va. For more information, please visit www.arccorp.com.