Norwegian Cruise Line investigates fraudulent guest emails
Passengers reported messages containing accurate reservation details and directing recipients to unfamiliar websites for additional verification.
Norwegian Cruise Line said it is investigating reports of fraudulent emails falsely presented as company communications. Passengers began reporting the suspicious messages on social media on October 10, 2026.
According to passenger accounts, the emails identified guests by their actual names and included ships, departure dates and booking numbers. Several users also said the messages contained accurate sailing dates and amounts paid. The emails reportedly warned that fully paid reservations could be canceled unless recipients completed another verification process through an unfamiliar website.
One passenger reported receiving an email requesting completion of guest check-in for a Norwegian Encore sailing from Vancouver to Los Angeles. The passenger said Norwegian confirmed that the message did not originate from the cruise line, although it listed the full guest name, reservation number and amount paid.
Norwegian has not confirmed that a data breach occurred. The company advised guests not to click links, respond to the reported emails, or provide personal or payment information. It identified @ncl.com, @e.ncl.com and @nclcorp.com as its legitimate email domains. For reservation questions, Norwegian directed guests to contact their travel advisor or call the cruise line.
