Digital security

Every digital account you maintain on the internet should have a unique password which meets key security criteria. Security always begins with the creation of a strong password:

For example, at AEGEAN, passwords created for your Web or Miles+Bonus accounts must:

• consist of at least 8-30 Latin letters
• contain at least one letter
• contain at least one number
• contain at least one special character (!^+%/()=?_:`@~|\}][{$.,*-)
• not contain the special characters (;#&'<>")
• not start with “0” (zero)

Additional important advice:  

• The more character, alphanumeric and symbol combinations your password contains, the more secure it is.
• You should change your passwords regularly or right after you suspect they have been hacked.
• It is recommended that every new password is sufficiently different from previous ones and that it can be easily memorised by you but not by others. Consider using an unforgettable phrase such as “8eyesRwatchingU*”.

A strong password should not contain any of the following:

• Any common series of letters or numbers (such as “qwerty” or “12345”)
•  Any personal information pertaining to your or a family member (such as birthdays, address or phone number)
• Any password you have used in the past
• When updating your password for an account, take time to verify that your personal data such as address, e-mail address and phone number, are also up to date and accurate.

If something about a website appears suspicious, it very well might be! 

You can easily verify whether a website is safe from its address (URL). It should always be preceded by “https: //” before the URL for that page; for example, https://en.aegeanair.com/. HTTPS is the standard for securely sending data through the internet, and makes it very difficult for criminals to locate or monitor you.. 

It is also important to know that on secure and legitimate websites, such as those of AEGEAN and Olympic Air, you will always see a padlock icon before the URL.  

 

If you do not see any of the above indicators, it may be unsafe to enter your private data, such as a password or credit card number, on this website!

You can add an additional level of security by activating two-factor authentication of your identity. With two-factor identity verification, you add another level of security to your account in case your password is stolen.

After configuring your two-factor authentication, you can log in to your account in two steps using an additional unique code you receive by telephone, SMS or e-mail. By successfully entering the additional code number, you are securely logged in to your account.

This method helps protect your account, even if a third party has acquired your password.

When you connect to a wireless network in a public place, you may be exposing yourself to numerous security risks. Use only protected Wi-Fi networks secured with passwords or a mobile phone data network on your device if possible.

A little preparation before your trip helps keep your data safe at all times. Spend a little time at home to add an additional level of protection to your digital life by completing some basic tasks, such as updating your operating system to the latest version on your computer or mobile device. It is also important to regularly backup your data.

Scammers may manipulate the top results that appear in search engines such as Google. More specifically, it is possible that the results for a common search term, such as “Aegean Airlines telephone number”, is connected to a webpage that does not belong to the aegeanair.com website. This could be used to trick users into providing sensitive information.

Scammers could then use various methods to convince users they are talking to a customer representative at AEGEAN or a trustworthy travel agency. If the scam is successful, they could access the personal data of a customer and make any number of financial transactions, such as:

• booking flights
• get money refunds
• transfer miles from a M+B account,
• control the miles card and many more.

How can you identify and prevent online fraud?

1. Never open links or attachments to e-mails from senders you do not recognise or if the message is odd or unexpected. Always verify that you are on the aegeanair.com website before entering your password, credit card number or other personal data.
2. Remember to check for the padlock icon and the https:// designator before the URL of the website.
   
   *The same precautions apply to telephone numbers:

1. always make sure you are calling a number you found on the official AEGEAN website, www.aegeanair.com.
2. Store useful numbers in your Contacts list.

If, however, you are not sure about a message you have received, you can always contact AEGEAN to verify the message is authentic.

The use of strong passwords and regularly changing them is equally important. If scammers gain access to your main e-mail account, for example, they could use it to commit fraud without your knowledge.

One malicious method often used is the application of a secret configuration of e-mail filters on your account to forward messages you receive directly to the Spam folder. More specifically, this allows the scammer to gain access to almost every other account associated with the hacked e-mail address, change passwords and begin to cause damage.

Aside from following the instructions regarding password security, you must be particularly careful with your main e-mail addresses to avoid such attacks.

• Activate notifications for other accounts, such as credit cards or bank accounts, so you can be made aware of suspicious or unusual activity.
• Use two-factor or multi-factor identity authentication when logging in to your main e-mail account.
• Check the settings on your e-mail filters from time to time to ensure they have not been hacked.

Phishing attempts often take the form of an e-mail or SMS message that appears to be from a person or legitimate company that you are familiar with. The message may ask you to follow a web link that will take you to websites that appear legitimate and will convince you to enter your account password or credit card numbers, usually for an urgent reason (e.g. a message that says your account has been hacked or a message that asks you to verify your identity and many other types).

Phishing messages and the websites they are linked to in order to convince you they are legitimate often use the authentic logo or company name, but there are usually numerous indications that these are not authentic:

• The e-mail address or URL of the sender is slightly different from the authentic one (e.g. it may be linked to "aegeanairlines.net" or "Aegean.com" instead of " www.aegeanair.com ").
• The sender’s name may seem familiar but it does not match the e-mail address or you do not recognise the e-mail address.
• The tone of the message is urgent or warns of serious consequences if you do not take immediate action related to your account or credit card (e.g. “Your account will be permanently deleted if you do not verify your password”)
• The phishing attacks that are more complicated may actually use the real e-mail address of a person or company, if the victim’s account has been hacked, or you may be asked to open an attachment which then installs a virus on your computer.

Similar and now common actions using the same tactics as phishing include:

• Fake lotteries, discounts or gifts
• Messages on social media networks promising a reward for sharing or clicking “Like” on the message
• An invoice or bill for the purchase of an AEGEAN ticket that was never made

To avoid the potential consequences of a successful phishing scam, you can do the following:

• Never open links or e-mail attachments from an unknown sender.
• Be careful with unexpected messages or those asking you urgently to provide sensitive personal information. If you are not sure about something you received from Aegean Airlines, you can always contact us to verify the authenticity of the message.
• If a message appears suspicious to you, carefully read the e-mail address or website link and check for minor spelling errors or other differences from the authentic ones.