# New dimensions in phishing.

**URL:** <https://boards.straightdope.com/t/new-dimensions-in-phishing/693623>\
**Category:** Miscellaneous and Personal Stuff I Must Share\
**Created:** [July 20, 2014, 9:00pm UTC](https://boards.straightdope.com/t/new-dimensions-in-phishing/693623 "2014-07-20T21:00:11Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hari\_Seldon](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/hari_seldon/32/5173_2.png) [@Hari\_Seldon](https://boards.straightdope.com/u/Hari_Seldon)\
**Post date:** [July 20, 2014, 9:00pm UTC](https://boards.straightdope.com/t/new-dimensions-in-phishing/693623/1 "2014-07-20T21:00:11Z")

</div>

Two days ago, I got an email that purported to come from Air Canada saying that here is my reservation, here is the reservation code (in the 6 alphanumeric format Air Canada uses) and your credit card was charged $438.60. To get your receipt, click on the following web site (it started with communications@www.AConline.??? (either com or ca, I don’t remember). This was almost convincing, but a call to Air Canada (35 minutes on hold) got me the information that they had received several thousand calls about the same reservation code. I also called the credit card company (10 minutes on hold) to find that no charges were recorded.

---

<div class="post-metadata">

**Author:** ![tellyworth](https://avatars.discourse-cdn.com/v4/letter/t/977dab/32.png) [@tellyworth](https://boards.straightdope.com/u/tellyworth)\
**Post date:** [July 20, 2014, 11:56pm UTC](https://boards.straightdope.com/t/new-dimensions-in-phishing/693623/2 "2014-07-20T23:56:25Z")

</div>

It’s been around for at least [2 years](http://www.symantec.com/connect/blogs/airline-booking-confirmation-phish).

---

<div class="post-metadata">

**Author:** ![Hari\_Seldon](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/hari_seldon/32/5173_2.png) [@Hari\_Seldon](https://boards.straightdope.com/u/Hari_Seldon)\
**Post date:** [July 21, 2014, 1:08am UTC](https://boards.straightdope.com/t/new-dimensions-in-phishing/693623/3 "2014-07-21T01:08:51Z")

</div>

Interesting. I forwarded it to my sysop who replied that not only was the return address spoofed, but so was the link. He told me that if I hovered the cursor over the link it would reveal the true link, which appeared to be a cafe in Florida. You live and (sometimes) learn.