Frontier passenger says he received an email promising a $397.90 refund after a system audit. Then they asked him to enter his credit card details

“If it’s too good to be true, it probably is.” TikTok user Jay Ayers (@jayayers3) recently shared his experience receiving an email that claimed to be from Frontier Airlines. Ayers was surprised when the message stated he was entitled to a refund. He explained, “If you took a flight on Frontier in the past, you might get an email regarding a ‘review process’ and a promised refund, supposedly following an audit of their system.”

Although the email appeared legitimate at first, Ayers noticed it requested his credit card details in order to process the refund, something he thought was a clear red flag. He quickly realized it was a scam and not actually from Frontier Airlines. “I’m not gonna lie, it was kind of good,” Ayers admitted, commenting on how convincing the scam was. “But it’s messed up, and they’re trying to get you to put your card info in. Be careful.”

What almost happened to Ayers is called phishing, a tactic cybercriminals use to deceive individuals into revealing personal or sensitive information, such as passwords or credit card numbers. According to McAfee, phishing websites frequently trick users into providing private details or may automatically download malicious software such as viruses, malware, or spyware onto their devices. Email remains the most common method for delivering these attacks, with messages designed to imitate urgent notifications from trusted companies, exactly the approach reportedly used in the Frontier Airlines scam.

Frontier is aware of the phishing issue

NBC Philadelphia reports that Frontier Airlines is aware of the phishing scam and is investigating it. In a statement, Frontier clarified that the airline does not email customers to request flight, reservation, payment, or contact information. They also noted that they will never contact customers to “Revalidate or confirm an upcoming flight or reservation; Re-enter or confirm credit card information; Provide payment information to receive a partial or full refund; Click a link or button to confirm card details, billing information, or a refund.”

Ayers told BroBible that, although the email contained accurate details about his past travel, certain aspects made him suspicious. “The sender’s email address was [email protected], and I noticed it was asking me to confirm card details, which was an immediate red flag,” Ayers explained. “I never clicked anything else and exited the email.”

A report from View From The Wing mentioned that Frontier Airlines experienced a data breach in July 2026, followed by another security incident in October 2026. Around the time of these incidents, customers began reporting emails similar to the one received by Ayers—many of which included legitimate flight details from actual Frontier trips. However, it remains unclear whether these phishing emails are directly connected to the security breaches.

In the comments section, several users shared that they, too, nearly fell victim to the phishing attempt—and some admitted falling for it. “Mine had the EXACT amount I paid too,” one user wrote. “They almost got me but I double checked.” Another commented, “Copied the email and went straight to Google! My question is WHO IS SELLING MY DATA?!?!?!?!!!!” One user confessed, “I literally fell for it. I’m so annoyed!”