Travel / brand impersonationEmail
Norwegian Cruise Line booking phishing emails
Last updated
Also known as: NCL reservation phishing, Fake NCL check-in / card verification email
What it looks like
Phishing emails that quote real NCL booking details (guest name, ship, departure date, booking number, and sometimes the amount paid) and urge you to verify a credit card, finish check-in, or complete a "security authentication" via an outside link. Guests began reporting them around October 10, 2026. NCL says it is investigating and has not confirmed a data breach.
Who it targets
Guests with Norwegian Cruise Line reservations.
Red flags
- Asks you to verify a card or finish check-in via a link in the email
- Threatens cancellation if you do not act quickly
- Link goes to a site that is not NCL's official site
- Sender address does not end in @ncl.com, @e.ncl.com, or @nclcorp.com
What to do if you clicked, paid, or replied
- Do not click links, reply, or enter card or personal information
- Check your booking only at ncl.com, in the official NCL app, through your travel advisor, or by calling 866-234-7350
- If you already entered card details, contact your bank or card issuer right away
- Report phishing and unexpected charges through official channels
Still circulating?
Reported since about October 10, 2026; NCL investigating, no confirmed breach as of source coverage.
Educational summary only. Verify details on the source page. Report fraud at ReportFraud.ftc.gov or ic3.gov.