Image Alt Text

Latest News

rss

 

 

Fraud Alert: Unauthorised Use of IATA Credentials and NDC Access

We have been advised of a significant fraud incident overseas involving the unauthorised use of a legitimate agency’s IATA accreditation number and GDS PCC to gain airline NDC access and issue fraudulent tickets using stolen credit cards.

Fraudsters operating from Brazil and other international locations spoofed an agency’s email domain in order to impersonate a legitimate travel business. Using the agency’s valid IATA accreditation number and GDS PCC—without authorisation—the individual attempted to gain access to airline NDC connections. Fraudulent ticketing ultimately occurred through an airline’s NDC channel, despite the legitimate agency not being registered for that NDC connection. The tickets were issued using stolen credit cards, and subsequent chargebacks exposed the scheme. Similar attempts were identified across multiple airlines and connectivity providers.

While identified abroad, this type of coordinated activity can quickly extend to other markets. Australian agencies should be on high alert.

We recommend closely monitoring BSP reports, strictly controlling who can request or approve NDC access, tracking all NDC registrations centrally.  Airlines and technology partners must apply strong authentication measures before granting access.

Report any suspicious activity immediately to your airline partners and relevant providers.

Showing 0 Comment



Comments are closed.

Archives

  • 2026
  • 2025
  • 2024
  • 2023
  • 2022



ATIA
Suite 3, Level 31
31 Market Street
Sydney NSW 2000
Australia

Contact
P: 02 9287 9900
E: atia@atia.travel