Beware of fake websites

The site was a part of a ‘phishing’ plan. Phishing websites try to deceive you into disclosing personal or sensitive information by closely replicating websites you know, using names, logos, and disclaimers that look familiar. The main way people are directed to phishing websites is via emails that imitate legitimate organisations.

In this case, the fraudulent website replicated our login page, aiming to deceive members into disclosing their member number, pin and date of birth.

Because we detected the phishing website not long after it was created and took immediate action to take the website down, we do not believe that any members have been affected. However, we cannot be sure that some members have not been phished. If you have successfully logged into your Qantas Super account, you have not been phished. The only way you can get to your online account is by logging in through our legitimate website.

Importantly, we use two factor authentication for account login – which means if you have been phished, the perpetrators would not be able to access your account without authenticating you via the phone number or email address we have on file for you.

We are continuing to monitor our member accounts and are working consistently with Qantas Group Cyber Security and our technology partners to ensure our systems and your personal information are as secure as possible.

1. Always log in in via qantassuper.com.au. This is to prevent you being taken to fraudulent or fake websites from search engines or emails.
2. Look for the padlock icon to the left of the website address in your browser to check you are logging into a secure website.
3. Use strong passwords or pin numbers for all your online services and change them regularly.