I almost got caught on a recent scam, there are many ways they scam , had a compliant with Gulf Air, sent them an email, they send you an SR (service request number and say wait) 4 months an no answer so went to their facebook page and asked them there and like many others who had no reply they ask for the SR number. I gave them the number and they said they will check.
The scam works as scammers go to the facebook page, see your sr number and then send you an e mail saying "complaint gulf air@ gmail.com" the email address just shows as "complaint @gulfair" Gulfair would notn use a gmail acc but they hide that in the reply heading.
They then apologise and offer you a 30% reduction in tickets and to go tell them what dates you want to book for. You reply to the email with dates, they send you back a proper ticket BUT when you check the code online it says "flight not found"
Of course they ask you to pay by either credit card , paypal of another way. Then when you go to that payment it says credit card not working erroro401... use another way ie paypal as its as good as cash. I didnt pay after checking flight number and rechecking their email address.
The scam works because Gulf Air rarely answer e mails and people look for other ways to contact them like I did thru their facebook page thus revealing the real SR number for scammers to use back to you.