Key Aspects:
- Guests booked on Norwegian Cruise Line sailings have reported receiving fraudulent emails containing real reservation details and requesting credit card verification.
- The fake messages claim passengers must complete a security check before boarding, and include phony links to submit information.
- Norwegian Cruise Line is investigating the reports and warning guests not to click suspicious links or provide personal or payment information.
Norwegian Cruise Line is warning guests about fraudulent emails that appear to contain genuine cruise reservation information. The messages have prompted concern among passengers and an investigation by the cruise line.
Passengers began reporting the suspicious emails on social media on October 10, 2026. The messages impersonate NCL and request that guests click links to complete security verification, confirm their payment cards, or finish check-in.
“To safeguard your booking and provide a smooth check-in, Norwegian Cruise Line requires a single security authentication for the card on file for your Norwegian Getaway reservation,” reads one of the fraudulent emails shared on Reddit. “This is a security measure, not a request for payment.”
Some of these emails warn that bookings could be cancelled if passengers don’t act promptly. The reported messages identify the guest’s actual name, ship, departure date, and booking number, adding to their credibility.
One Norwegian Encore passenger reported on Reddit that a fraudulent email included their full booking details, including the amount paid. Another Reddit user booked on Norwegian Getaway reported receiving at least six suspicious emails, all with accurate booking and personal information.
While the details included in these emails may make them appear more genuine, they are phishing scams. Phishing is a cyberattack in which scammers impersonate a trusted person or organization in order to trick people into revealing sensitive information or handing over money.
Passengers have questioned how the current scammers obtained their information in the first place, with some speculating about a possible data breach. NCL, however, has not confirmed any explanation for how the scammers obtained accurate booking information.
Norwegian Cruise Line Responds to Fraudulent Emails
NCL has confirmed it is aware of the fraudulent emails and is investigating them. The cruise line has posted a notice on its website and sent a letter to travel advisors and says it will also share the warning with guests booked to depart on its cruises within the next 30 days.
“We are aware of reports of fraudulent emails falsely claiming to be from Norwegian Cruise Line being sent to guests and are actively investigating the matter,” the letter says.
The cruise line instructs guests not to click links, reply, supply any personal or payment information, and to check email addresses carefully. According to the letter, official emails from the cruise line will be sent from addresses ending in @ncl.com or @nclcorp.com.
In May 2025, Cruise Hive reported that Norwegian Cruise Line had warned guests of another phishing scam, executed via phone. Scammers posing as NCL representatives contacted a guest about flights for a large party, ultimately tricking her out of nearly $20,000 across two incidents.
Norwegian Cruise Line is not the only cruise operator to face phishing attacks. In February 2025, Virgin Voyages also warned guests about scam calls and fake offers seeking payment and personal information.
Even emails or phone calls appearing to originate from legitimate addresses should be treated cautiously. Sender information and phone numbers can be spoofed.
Links in suspicious emails should never be clicked on, nor should payment information be provided on a random phone call. Concerned passengers should always visit the cruise line’s official website, call the official customer service phone number, or contact their travel advisor to verify information.
