BEAWARE: Fake TAP Compensation Email & Website

TAP was hacked earlier this fall, and customer data of millions of passengers leaked and distributed on the dark web (read more here). The airline, which is promptly required to inform affected customers, has not sent out a single email.

Hackers, however, have started to send emails pretending that they are sending a refund on behalf of TAP. But, of course, we all know that these are fake because TAP doesn’t provide refunds unless the court seizes their bank account, like what happened in Germany.

You can access TAP here.

Fake TAP Email:

The email appears from TAP, but the images are missing, at least from the version that a reader forwarded.

Fake TAP Website:

It is clear that the website is not TAP, but the page layout is very familiar.

The URL is an eye-opener, though.

Conclusion

I hope that TAP gets hit with a significant fine because of zero direct communication about the hack for customers whose information they leaked.

The fake email and the website are pretty well done, but the hacker could have come up with an URL more closely pretending to be TAP.

I didn’t click further than the web page to see what other information they would request.