The text states: "It appears that an unknown person learned and used your valid username and password to access your Rapid Rewards account on Southwest.com. This can happen if you use the same password for multiple online services and one of those services is compromised. To address this, we have deactivated your current password to help protect your account, and you will need to reset your password."
They had links that I inspected, not wanting to select them and go to some unknown page. The "Book Now" link returned the message "A server with the specified host name could not be found." The URL "Redeem link" returned a URL "i.luv.southwest.com." And the URL link for "Buy Points" returned the same URL, "i.luv.southwest.com."
I logged on to my account as I normally would, using my browser and my normal URL, and the same password I've always used, expecting to get a notice my password no longer worked, but it worked as it normally did. I verified that everything was correct. Reservations and points were all OK.
Not sure if the sending address is a legitimate one or not, same with the others. I will change my password but through my normal logon with southwest.com. just to be safe. The email looks very real as if from Southwest. I'm just not sure it is.
Does Southwest have an email address for reporting suspicious emails?
