Qantas $95 Survey Phishing Scam

Outline:
Email claims that Australian airline Qantas is conducting a survey to gather opinions from customers and will pay you $95 for participating. It instructs you to click a link to fill in the survey and claim your reward.




Brief Analysis:
The email is not associated with Qantas in any way and it does not link to a legitimate customer survey. And, you will certainly not receive $95 for participating. In fact, the email is a phishing scam designed to steal your credit card details, your email address and password, and other identifying information.

Example:
Thanks for being a Customer of QantasYou’ve been selected to participate in a short 2-3 minute

research – Survey study that Qantas is conductiıng to gather opinions .In return we will credit $95 to your account – Just for your time!Your participation in this study is voluntary and you may refuse to answer any question. Only a small sample of Customers will receive the questionnaire,

Each week we randomly select 200 lucky customers from different cities in Australia ,
so your participation is vital to the study.We thank you for taking the time to complete this survey.

We rely on your answers to help us provide you with the best possible service, we would appreciate your assistance in filling out the survey .How to complete the Survey :

Click on Find out More – Claim my reward

Choose the answers that’s right for you

Qantas Survey phishing Scam





Detailed Analysis:
According to this email, you have been selected to participate in a survey study that Australian airline Qantas is conducting to gather opinions from customers. Supposedly, Qantas will credit $95 to your account just for filling in the short 2-3 minute survey. It urges you to click a “Find out more – Claim my reward” button to proceed.

However, the email is in no way associated with Qantas and the supposed survey is not legitimate market research. And, you certainly will not receive $95 for filling in the survey. Instead, the email is a phishing scam designed to steal your personal and financial information. If you click the link, you will be taken to a fraudulent website that asks you to choose answers to 5 generic questions about your experience as a Qantas customer:

Qantas Scam Survey

After you complete the “survey” and click the “start” button, you will be taken to a fake claim form that asks for your email address and password, your name and employment status, your date of birth, your credit card details, and other personal information:

Qantas survey scam claim form

After you fill in the fake form and hit the “Submit” button, a notice will inform you that you have successfully claimed your reward and that your account will be credited within several business days.

But, alas, now the criminals can collect all of the information you supplied. Armed with your information, they can conduct fraudulent credit card transactions in your name and hijack your email account. They can use the hijacked email account to launch spam and scam campaigns in your name. If your email address and email password provide access to connected services such as cloud storage or online stores, the criminals can gather even more of your personal information and conduct further fraudulent transactions.  Ultimately, the criminals may collect enough information about you to allow them to steal your identity.

“Quick survey” phishing scams like this one are quite common. Previous versions have pretended to be from several other well-known companies and banks, including NAB and Westpac.

You need to be wary of any unsolicited message that promises a sizable cash payment for participating in an insignificant survey. Of course, companies regularly conduct customer surveys of various types and, in some cases, you may be offered a small reward or incentive for participating. However, no company is ever likely to offer sums such as $95 to large numbers of participants in exchange for filling in such brief surveys.

Moreover, no legitimate company is ever likely to ask recipients to submit personal and financial information via an unsecure web form, be it contained in an attached file or hosted on a website. And no legitimate company other than your email service provider should ever require you to supply your email account password.

If you receive one of these bogus survey offers, do not open any attachments or follow any links that it may contain.




Last updated: November 14, 2016
First published: November 14, 2016
By Brett M. Christensen
About Hoax-Slayer

References
NAB “Quick 4 Questions Survey” Phishing Scam
Westpac ‘Quick Survey’ Phishing Scam