Is this legitimate?

[Bluewave]

On Monday, 20/7/2026, my husband received an email from the address:
[email protected]
With the subject line:
Expiring soon - Your Complimentary Qantas Club Lounge Invitation
There was also small print at the top of the email:
Available with your American Express Qantas Business Rewards Card

I was dubious at first glance, but it did have all his correct details in the email: FF#, Points & Status balances, addressed to Dear ... (correct first name). I hovered the cursor over the address, and it doesn't seem to be spoofed.

It said he still has "a Domestic Qantas Club Complimentary Lounge invitation available" and it expires this Oct, but I cannot see the pass in his QFF account page, only that 2 have been transferred (no dates or pass types shown). He would have received 1 from Silver status on his QFF anniversary (July 2025), and 2 from the AMEX BizRewards card, in Oct 2025. The email has a link to the "Complimentary Invitations Portal", but being cautious, we rang QFF (131131) this morning for assurance before clicking the link.

What an awful 90 minutes of wasted time that was!! Spoke with QFF, AMEX, QBR ...and around in circles a few times before getting disconnected while on hold. Nobody could actually help.

They advised us not to click the link as they said it's not a real Qantas email, but I have gotten other emails in the past from that address. The really annoying thing is that there is no good history shown for Lounge invitations received and used (ie, a statement of CR/DR, like Points and Status).

Is anyone able to advise whether this "Portal" is real? And if the link is legitimate? The URL begins with DMC Error... etc. Maybe I can use a different browser or device to try logging in??

 

[Bluewave]

On Monday, 20/7/2026, my husband received an email from the address:
[email protected]
With the subject line:
Expiring soon - Your Complimentary Qantas Club Lounge Invitation
There was also small print at the top of the email:
Available with your American Express Qantas Business Rewards Card

I was dubious at first glance, but it did have all his correct details in the email: FF#, Points & Status balances, addressed to Dear ... (correct first name). I hovered the cursor over the address, and it doesn't seem to be spoofed.

It said he still has "a Domestic Qantas Club Complimentary Lounge invitation available" and it expires this Oct, but I cannot see the pass in his QFF account page, only that 2 have been transferred (no dates or pass types shown). He would have received 1 from Silver status on his QFF anniversary (July 2025), and 2 from the AMEX BizRewards card, in Oct 2025. The email has a link to the "Complimentary Invitations Portal", but being cautious, we rang QFF (131131) this morning for assurance before clicking the link.

What an awful 90 minutes of wasted time that was!! Spoke with QFF, AMEX, QBR ...and around in circles a few times before getting disconnected while on hold. Nobody could actually help.

They advised us not to click the link as they said it's not a real Qantas email, but I have gotten other emails in the past from that address. The really annoying thing is that there is no good history shown for Lounge invitations received and used (ie, a statement of CR/DR, like Points and Status).

Is anyone able to advise whether this "Portal" is real? And if the link is legitimate? The URL begins with DMC Error... etc. Maybe I can use a different browser or device to try logging in??

Okay, that URL didn't appear in my post. It begins with h t t p s : / / then the same domain as the email, followed by lots of characters

 

[Seat0B]

Sorry I can't help you, but what an irritating experience this is. Given the QF FF details that were hacked last year, it is unfortunately not that impossible that an email from a bad actor can have all your correct details. I think you are right to be very cautious until proven otherwise.

 

[Bluewave]

Sorry I can't help you, but what an irritating experience this is. Given the QF FF details that were hacked last year, it is unfortunately not that impossible that an email from a bad actor can have all your correct details. I think you are right to be very cautious until proven otherwise.

Thank you. A friend (Platinum) says the email address is legitimate. I just wish the QF customer service people had half a clue!!!

 

[Bluewave]

Further info ... I went to "Google Safe Browsing" and checked the site status for the link URL. It reported "No unsafe content found". I also checked on VirusTotal.com, and "No security vendors flagged this URL as malicious".