American will never ask you to make security-related changes, or collect personal or financial information in unsolicited emails or phones calls, postal mailings or faxes. Any attempt to do so should be considered fraudulent.
If you suspect you’ve been a victim of fraud or want to report suspicious activity, don't click on any links, open any attachments, call any phone numbers listed or follow any instructions given.
Instead, contact aa.com security and attach a copy of any suspicious emails. For mail received in person, take a picture of the mailing and envelope and send via email.
If the communication came in the mail you can file a complaint with the U.S. Postal Service.
File a mail fraud complaint Link opens another site that may not meet accessibility guidelines
If you find a potential security issue on our website or app please email it to us.
Read our privacy policy and security statement to learn how we protect your personal information when you buy a ticket or access your account over the web.
Phishing can include phony phone calls, emails, faxes, contracts and postal mailings. The communications are sent in hopes of collecting personal or account information (usernames, passwords, email addresses, credit card and social security numbers).
These communications are disguised as legitimate and often include:
Common scams use unsolicited emails under the guise of confirming or completing a flight reservation, e-ticket or order. These emails will generally ask you download something, or change/update personal or account information.
What to look for:
Social media scams are designed to steal your personal information or compromise your computer in exchange for the promise of free airline gift cards, miles or tickets.
They often encourage you to share or re-publish content that promotes the scheme. These promotions commonly spread on social media but you can easily see if they're valid by checking if the promotion is listed on aa.com or one of our official social media accounts.