british airways logo and site links

United Kingdom

Change country

Security Policy

Booking your British Airways tickets online is quick, easy, convenient and safe.

British Airways makes every effort to maintain customer confidentiality when securing an online payment. This includes ensuring the security of your credit card details and other personal information.

All of your personal information is encrypted as it travels over the Internet.

As with any standard email, emails containing your personal data sent to or from British Airways will travel in a non-encrypted format.

You may be aware of recent media reports that have a highlighted a practice called "Phishing". This is the illegal gathering of personal information by deception. The unsolicited emails are sent to customers from lists illegally gathered by a third party, and ask them to enter or reconfirm bank or password details into a 'cloned' or illegal copy web site.

For your protection please be aware of the following facts:-

British Airways will never ask you to enter personal bank account or credit card details into an email or through a link sent via an email. You will only be asked for your card payment details if you wish to change or refund your booking on ba.com. We require this information specifically to debit or credit your card in relation to your booking.

When you travel to a country whose government requires us to provide Advance Passenger Information, you will be requested to give your passport and associated travel details on ba.com, before you fly.

British Airways complies fully with all aspects of the Data Protection Act and, as such, takes all reasonable steps to prevent unauthorised and unlawful processing of personal data.

Would you like to know more? Choose one of the options below to make a secure booking online, for a step-by-step introduction to the process of making secure reservations online - or to get answers to security questions you may still have.

Using Manage My Booking to securely service your booking

British Airways makes every effort to ensure only authorized access is made to your booking when using Manage My Booking. This includes applying different levels of authentication depending on who you are and which services are being used.

If you are not a member of the Executive Club or you are a member but you are not logged into your account, then you will need to provide your booking reference and your surname to view your itinerary, add and change seat and special meal requests, add your Advance Passenger Information (API) or email your itinerary to a friend.

You will need to provide additional information to view details of any special meal previously requested, view or change your API or to print or email your e-ticket receipt. The additional information required is not new; it will already have been provided by whoever made your booking at that time or by you when updating your booking. Information, which may be requested, includes your passport number and associated travel details, or all or part of the credit or debit card number of the card used to make your booking. If such information is not present in your booking, then these second level authenticated services will not be available.

If you are a member of the Executive Club and you are logged into your account, then for your bookings in respect of which you have provided your Executive Club number, you will only be requested to provide additional information as described above to view or change another person’s API (on the same booking as yourself), or to print or email your e-ticket receipt.

Note: This information reflects our current security policy. If any changes in industry standards, the law or our procedures, the information in these pages will be updated.