anyone received invalid email from Qantas?

[Myrna]

I have received this email from Qantas a number of times in the last 2 weeks, they all went into junk/spam folder. I have logged into my QFF account, and the email address is correct there. Not sure if it is legit, or a spam?

 

[mrsterryn]

Edited as was bad advice

 

[Myrna]

I would say spam as there appears to be a Logon button .
I sometimes do a check of the address via doing a reply (not sending it ) and see what it comes up as

This is the email address "Qantas Frequent Flyer <[email protected]>" - look legit?

 

[Myrna]

Ah! This was what hidden in the logon button:

 

[Daver6]

This is the email address "Qantas Frequent Flyer <[email protected]>" - look legit?

Never rely on the from address to determine whether an email is legit or not. It is super easy to forge a from address.

 

[Mattg]

It's not legit. The real email address for Qantas Frequent Flyer is
[email protected] (with .au at the end)

 

[tdimdad]

The first thing always to check is the link in any "Login" etc buttons, as you did. If in doubt, I usually also check the reply-to address and perhaps even the actual message your mail server has received as the headers may provide further clues, though that's going a bit technical then.

In the attached screen captures, the reply-to points to Qantas so that's reassuring. Reading the raw text in the headers from bottom up would often contain rather odd domain / server names and a path to your mail server if it's spam (quite often you see <some-rubbish>.ru, i.e. with love from Russia, or similar suspicious). Common sense then applies in 99% of the cases: why would a reputable company send emails through '654w8d48w.LoveMe.ru' or have their links point to Liberia?

 

[DC3]

There’s bound to be someone who will be duped by this. And I’m still waiting for my $540,000,000 from Nigeria.

 

[Daver6]

The first thing always to check is the link in any "Login" etc buttons, as you did. If in doubt, I usually also check the reply-to address and perhaps even the actual message your mail server has received as the headers may provide further clues, though that's going a bit technical then.

In the attached screen captures, the reply-to points to Qantas so that's reassuring. Reading the raw text in the headers from bottom up would often contain rather odd domain / server names and a path to your mail server if it's spam (quite often you see <some-rubbish>.ru, i.e. with love from Russia, or similar suspicious). Common sense then applies in 99% of the cases: why would a reputable company send emails through '654w8d48w.LoveMe.ru' or have their links point to Liberia?

Some of this is bad advice. No offence. The reply-to address is trivial to forge and a meaningless check.

 

[mrsterryn]

Edited my bad advice when I get told twice I know to fix up
@Daver6

 

[tomlee1986]

haven't received such email

 

[tdimdad]

Some of this is bad advice. No offence. The reply-to address is trivial to forge and a meaningless check.

Agree on that it can be fake. And we also come to the laziness of some (even large Australian globally operating) companies of not registering the most obvious domains to themselves (e.g. *.com and *.com.au), allowing some of them to be grabbed for other uses. But those messages I've checked here and there, in 90% of the cases the reply-to gives it away, too, as it points to an exotic address which has no connection to the perceived story in the message.
But you are right in that it's not waterproof by any means, rather a step in the process. To me it'd be: check the link, if reasonable check the addresses, if reasonable but still in doubt go check the headers. If still in doubt, forget it. In most cases, the fakeness is revealed quite early in those steps.

 

[Daver6]

Another way to be safe, is taking the above example. If you were to take it on face value that one's email address is invalid is simply NEVER use the link in the email. Go yourself to www.qantas.com and login and check. No harm done that way.