Crew Members have recently reported receiving emails that appear to be from Disney Cruise Line, North Lane and wire transfer companies. These emails are phishing scams, asking you to provide personal information and documents. These phishing scam emails are meant to look valid to encourage you to take action and provide sensitive information that may be used in a harmful manner. In recent phishing scam emails, DCL email templates and graphics have also been used to try to make you believe the message is from Disney Cruise Line. Please use caution when opening emails from anyone!

Remember, North Lane will not reach out to you directly and ask for account details, and Disney Cruise Line will never ask you for bank account information via email.

Reminders to avoid scams

Scammers never miss a chance to capitalize on fear, uncertainty and urgency to get you to fall victim to fraudulent schemes. They flood inboxes with phishing emails that impersonate businesses or public institutions to trick victims into revealing personal information, downloading malware or even donating to fraudulent charities. You can protect yourself from scammers by remembering the following: 

• Look closely at the sender. The email may appear to be from a legitimate source, but upon closer examination, you may realize the address is slightly off or comes from a public domain (for example, @disneycruiseline.communication instead of @disney.com). 
• Watch for generic greetings and misspellings. Legitimate companies usually call you by your name versus generic greetings such as “dear valued customer.” Beware of emails containing misspellings and poor grammar as this is common with phishing
• Never send sensitive information via email. Legitimate companies don’t request sensitive information (passwords, credit card information, account numbers) via email. If action is needed, they will generally request that you call the company directly. 
• Think before you click. Before clicking on a link, hover over it to verify its authenticity. Does the hyperlink in the message actually lead to the page it claims it will? Also, look for URLs that begin with HTTPS. The “S” indicates that a website uses encryption to protect users. Never open attachments from emails that look suspicious. Legitimate companies typically direct customers to their websites for further reading or to download materials. 

  • If you receive a suspicious message from a financial institution or other organization and worry the message could be legitimate, log in to the company's website or app directly to review your account status and any pending notifications. You can also reach out to them using official numbers or emails from their site, from the back of your card, or from a printed bill or statement. If you have any questions about your paycard account, please view our resources on this site, which include the verified contact information and links to access your account. 

  • If the suspicious message appears to come from a person you know, contact that person via another means like by text message or a phone call to confirm it.

• Trust your gut. If you have any doubts about a suspicious email or link, do not respond or click on any links. Instead, make sure to report it to BadEmail@disney.com so security experts can make sure to look into the issue. Even if the item doesn’t turn out to be a risk, it never hurts to flag it to be safe.