Cruise passengers are receiving phishing emails that use real booking details to appear genuine. Norwegian Cruise Line (NCL) says it is investigating reports of fraudulent emails that ask guests to complete a “security verification” or confirm a credit card before boarding. Some messages threaten to cancel the booking unless the passenger acts quickly.
The safest response is simple: don’t click the email’s links, reply, or share personal or payment information. Instead, check your reservation through the cruise line’s official website or app, or contact the line using a phone number you find independently.
NCL has posted an official guest advisory warning passengers about fraudulent emails. It says guests should not click links, respond, or provide personal or payment details. NCL lists email domains ending in @ncl.com, @e.ncl.com, and @nclcorp.com as official. Still, a sender name or address alone cannot prove a message is safe.
Reports in October 2026 describe messages that impersonate NCL and include information such as a passenger’s name, ship, sailing date, booking number, and, in some cases, the amount paid. The emails claim guests must complete a security check, verify a payment card, or finish check-in to keep their reservation.
That mix of accurate information and urgent language can make a fake message feel real. A threat of cancellation may also push someone to act before they stop to check.
NCL is investigating the reports. The available information does not confirm how the scammers obtained the booking details, or establish that NCL’s systems were breached. As Cruise Hive reported, passengers shared reports of messages with real reservation data, while the source of that information remained unclear.
Scammers can use personal information from many sources. A third-party service, an old data exposure, or information shared elsewhere could be one possible route. But unless a company or investigator confirms the source, it is best not to assume how the data was obtained.
A correct ship name or booking number should make you cautious, not compliant. Scammers use these details to earn trust, then direct people to a fake page that asks for card numbers, passwords, or other sensitive information.
Similar concerns surfaced earlier in September 2026. Travel Weekly reported that Cunard customers received emails posing as the cruise line and requesting payment. Cunard said it was investigating reports and stated that it had found no unauthorized access to its systems.
Celestyal Cruises has also issued an official warning about fraudulent emails sent to guests. Its advisory describes messages that solicit booking verification and payment card details, and it tells recipients not to click links, respond, or share personal or financial information. Celestyal adds that anyone who has already provided payment details should contact their bank or card provider immediately, and that booking questions should go through the line's official channels or the guest's travel advisor. The NCL, Cunard and Celestyal reports are separate cases, but together they show why familiar booking details are not enough to verify a message.
A cruise line may send real reminders about payments, check-in, or travel documents. But do not enter card details, passwords, or security codes through a link in an unexpected email. Do not treat a threat of cancellation as proof that you need to act through that message.
If an email says you must “verify” a card, pay a balance through an unfamiliar page, or share personal details to avoid losing your cruise, stop and confirm through a trusted channel. Even a polished design, correct logo, or accurate booking detail does not prove the email came from the cruise line.
Check the sender’s full address. NCL says its email domains end in @ncl.com, @e.ncl.com, or @nclcorp.com. Watch for misspellings, extra words, or unrelated domains. A matching display name is not enough.
Skip links in unexpected messages. Open the cruise line’s official app or type its website address into your browser yourself. Sign in and check your booking there.
Never send payment details by email. Don’t provide card numbers, passwords, security codes, or identity documents through an email link or reply.
Call using a number you find independently. Use the phone number on the cruise line’s official website or on your booking paperwork, not a number in the suspicious message. NCL lists 866-234-7350 for reservation questions in the United States; travelers elsewhere can use the official NCL contact page.
Call your travel advisor if you booked through one. A real advisor can help check your reservation and guide you to the right contact. Use a phone number or email address you already trust.
If you opened the email but did not enter information, close the page and avoid replying. Report the message as phishing through your email service, then delete it.
If you entered a password, change it on the real cruise line website and anywhere else you used the same password. If you shared card details, contact your card issuer using the number on the card. Ask about blocking or replacing it and watch for unfamiliar charges. If you gave away other personal information, contact the relevant organization through its official website to ask what steps to take.
If you are not sure whether you changed anything, contact the cruise line or your advisor through a trusted channel. Keep the suspicious email until you have noted what information you shared, but don’t forward it to an address listed in the message.
A travel advisor cannot prevent every scam or control how outside companies handle data. But booking with an advisor gives you a real person to call when a message feels wrong. Your advisor can help you review the claim, find the right official contact, and check the booking through proper channels.
Painted Hills Travel plans cruises with personal support from the first booking details to the final travel checklist. Explore our cruise planning services or contact Painted Hills Travel for help with your next sailing.
NCL says it is investigating fraudulent emails that claim to be from the cruise line. The company advises guests not to click links, reply, or share personal or payment information. Verify any booking concern through NCL’s official website or phone number, or contact your travel advisor.
No. A real booking number does not prove that NCL’s systems were breached. NCL is investigating, and the available reports do not confirm how scammers obtained the information.
Don’t click its links or use its phone number. Go to the cruise line’s official website or app yourself, or call a number from your booking documents. If you booked with a travel advisor, contact that advisor using their known details.
NCL’s advisory lists addresses ending in @ncl.com, @e.ncl.com, and @nclcorp.com. Sender details can be misleading, so verify important requests through the official website or a trusted phone number.
Yes. If you booked through an advisor, call them using a number you already trust. They can help you verify the message and point you to the right official channel.
