United Airlines Impersonation Scams
Scammers impersonate United Airlines with fake itinerary-change emails and MileagePlus phishing. United will never ask you to pay a rebooking fee via gift card or re-verify account details through an email link.
Last reviewed: 1 June 2026
United's MileagePlus loyalty programme and extensive flight network provide scammers with a broad list of potential targets. Fraudulent emails claiming a flight change requires immediate confirmation are designed to create panic in travellers close to departure, making them less likely to pause and verify independently.
The same principles that apply to all airline impersonation hold: genuine booking updates are always accessible inside your United account, and legitimate fees are never payable by gift card.
How scammers impersonate it
- Sending fake itinerary-change emails requiring payment confirmation via an external link
- Creating phishing pages targeting MileagePlus members with expiring miles warnings
- Advertising fake United Airlines customer service numbers through search ads
- Spoofing United email addresses to send rebooking fee requests to recent travellers
- Calling passengers claiming a booking upgrade is available for immediate payment
What the real organisation never does
- Ask you to pay change fees or rebooking charges via gift cards or wire transfer
- Require MileagePlus password entry through an unsolicited email link
- Contact you via a phone number not listed on united.com
- Request bank details to process a refund via an unsolicited email
Common red flags
- Itinerary-change email with a payment link pointing to a non-united.com domain
- MileagePlus miles expiry notice asking for urgent account verification
- Customer service number for United found via a search ad rather than united.com
- Upgrade offer that can be claimed only through immediate gift card payment
- Sender domain using variants like 'united-airlines-service.net'
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Email: 'United Airlines: Your flight [number] has been rescheduled. Confirm your new itinerary and re-enter payment at [fake link].'
Email: 'MileagePlus Alert: Your [number] miles will expire unless you verify your account: [phishing link].'
How to verify
- Check your reservation under My Trips at united.com or in the United app
- MileagePlus account status and miles are visible at united.com after direct login
- Contact United customer support only via the contact details listed at united.com/contact
- Refunds are processed to the original payment method without requiring additional bank details
What to do if you're targeted
- Verify your booking directly at united.com before taking any action
- Change your MileagePlus password if account details were entered on a suspicious site
- Report phishing to United and file with the Internet Crime Complaint Center (IC3)
Frequently asked questions
How can I tell a real United email from a fake one?
Check that the sender domain is exactly @united.com, then verify any claimed booking change inside your United account at united.com — never by following the email link.