The Air Canada Cybersecurity Centre
What to know
We care about your safety. Be cautious of fake social media accounts, ads, emails, texts or calls claiming to be from Air Canada or Aeroplan. These can be used by scammers and fraudsters to steal your personal, payment, login or booking information.
Phishing, smishing and vishing
These deceptive tactics are commonly known as "phishing" for emails, "smishing" for text messages, and "vishing" for phone calls.
- Phishing emails aim to "fish" for your login information, such as passwords, bank account numbers, or credit card details to access your personal and financial data.
- Smishing, or SMS phishing, involves fraudulent text messages with deceptive links that lead to online forms designed to steal your personal information or download malware on your device.
- Vishing, or voice phishing, refers to fraudulent phone calls, voicemails, or automated robocalls, where scammers impersonate legitimate businesses and attempt to get your personal or payment information from you over the phone.
How do I recognize phishing, smishing or vishing?
Here are the signs to look out for. The message:
- is unsolicited or from an unknown sender. See the list of trusted Air Canada email addresses.
- contains text with misspelled words, incomplete sentences, poor grammar, or formatting that is irregular or unusual.
- asks you to respond urgently and prompts you to click on a hyperlink or open an attachment.
- asks for a password, financial information, or other sensitive personal information about yourself.
- contains unrealistic offers, unusual requests or promises an automatic financial gain. If it’s too good to be true, it probably is!
Fake ads and fake social media accounts
Stay vigilant when coming across ads on online search engines and social media that offer help, services or products appearing to be from Air Canada or Aeroplan. These ads can be deceptive and lead you to contact a fraudulent phone line disguised as Air Canada or Aeroplan’s call centre.
To protect yourself, make sure to always use the official and verified Air Canada or Aeroplan channels.
Unsolicited Air Canada job offers or invitations to apply
Although many recruitment websites or search engines may repost job descriptions and claim to offer recruitment services, we only officially advertise on the following sites:
- Air Canada Careers Portal
- Indeed
The Air Canada Talent Acquisition team will never ask for payment or sensitive personal information, or send unsolicited job offers via email or social media.
If someone claims to be a recruiter, don’t share your personal information. Check the Air Canada Careers portal and social media channels for official job postings and announcements.
Who to trust
Many accounts across various platforms are impersonating Air Canada. Make sure you’re connecting with official Air Canada or Aeroplan accounts on social media.
Our official accounts are:
- X (formerly Twitter): https://twitter.com/AirCanadaExternal site which may not meet accessibility guidelines and/or language preferences.
- Facebook: https://www.facebook.com/aircanadaExternal site which may not meet accessibility guidelines and/or language preferences.
- Instagram: https://www.instagram.com/aircanadaExternal site which may not meet accessibility guidelines and/or language preferences.
- TikTok: https://www.tiktok.com/@aircanadaExternal site which may not meet accessibility guidelines and/or language preferences.
- LinkedIn: https://www.linkedin.com/company/air-canadaExternal site which may not meet accessibility guidelines and/or language preferences.
Our official Air Canada Rouge accounts are:
- X (formerly Twitter): https://twitter.com/AirCanadaRougeExternal site which may not meet accessibility guidelines and/or language preferences.
- Facebook: https://www.facebook.com/aircanadarouge/External site which may not meet accessibility guidelines and/or language preferences.
- Instagram: https://www.instagram.com/aircanadarouge/External site which may not meet accessibility guidelines and/or language preferences.
Our official Aeroplan accounts are:
- X (formerly Twitter): https://twitter.com/aeroplanExternal site which may not meet accessibility guidelines and/or language preferences.
- Facebook: https://www.facebook.com/aeroplan/External site which may not meet accessibility guidelines and/or language preferences.
- Instagram: https://www.instagram.com/aeroplanExternal site which may not meet accessibility guidelines and/or language preferences.
- TikTok: https://www.tiktok.com/@aeroplanExternal site which may not meet accessibility guidelines and/or language preferences.
- LinkedIn: https://linkedin.com/company/aeroplanExternal site which may not meet accessibility guidelines and/or language preferences.
Our official Air Canada Vacations accounts are:
- Facebook: https://www.facebook.com/aircanadavacationsExternal site which may not meet accessibility guidelines and/or language preferences.
- Instagram: https://www.instagram.com/aircanadavacations/External site which may not meet accessibility guidelines and/or language preferences.
- TikTok: https://www.tiktok.com/@aircanadavacationsExternal site which may not meet accessibility guidelines and/or language preferences.
Communications from Air Canada and Aeroplan
There are two main types of communications you can expect from us:
- Service communications, sent by email or text messages providing information about your reservation
- Email marketing communications related to special offers, new destinations, and promotions
Here’s a list of safe domains Air Canada uses to communicate with our customers:
- @Mail.aircanada.com
- @communications.aircanada.com
- @info.aircanada.com
- @aircanada.com
- @aircanada.ca
- @communications.aeroplan.com
- @aeroplan.com
- @aeroplan.ca
- @vacv.com
Air Canada will sometimes use third parties to gather feedback, conduct research and other official activities with the following domains:
- noreply@qemailserver.com
- noreply@qualtrics-research.com
- notify@payments.interac.ca
- aircanada@buyatab.com
How to report
See what you can do if you see a fake ad or fake social media account, or if you receive a suspicious email, text message or phone call.
1) Report it to Air Canada
If you get a suspicious message claiming to be from Air Canada or Aeroplan, don't respond, click on links, or open attachments.
Instead, report the incident to the following email address and include all relevant details: phishing.hameconnage@aircanada.ca.
If you’re forwarding an email, make sure to include the message itself and paste the header information in the message body.
- Using the header information, we're able to investigate the email message in more detail and see where it was originally sent from.
- Learn more about how to view email header information on multiple platformsExternal site which may not meet accessibility guidelines and/or language preferences..
When reporting anything other than a possible phishing email, please provide as much detail as possible. For example, include a link to a website that is attempting to mimic Air Canada or Aeroplan.
- Provide the problematic URL (break apart the URL so it is not clickable)
- Example: http://aircanada.com would be hxxp://aircanada[.]com
- Provide a short description of how you came across this, in case one of our specialists needs to conduct further investigation.
2) Report it to your local police and the Canadian Anti-Fraud Center
If you believe you have been a victim of fraud, contact your local police and the Canadian Anti-Fraud CentreExternal site which may not meet accessibility guidelines and/or language preferences. at 1-888-495-8501.
Your privacy is important to us. To learn how Air Canada and Aeroplan collect, use, and protect the personal information you provide, please consult our Privacy Policy.