AirAsia

AirAsia

Basic information
Founded	1993
Legal Structure	Public
Industry	Airline
Also known as
Official website	https://airasia.com/

AirAsia is a budget airline based in Malaysia. In 2007, The New York Times described AirAsia as a pioneer of low-cost travel in Asia.^[1] As of November 2025, they serve Asia, the Middle East, and Australia.

This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the AirAsia category.

AirAsia secretly and forcefully subscribes any user who creates or links an account with them to 23 different types of spam ("AirAsia communications").

1. Users are neither made aware of this fact nor presented with the option to opt out.^{[citation needed]}
2. Normally companies bury opt-in text within their terms and conditions, but even the AirAsia privacy terms page is vague about this.^{[citation needed (November 2025)]}
3. Unsubscribing from AirAsia's spam is an 8-step process where users have to log into their account.

AirAsia secretly and automatically forces users to enroll into 23 different types of promotional and marketing emails (referred to as "communications") when they create or link an account.

1. When booking a flight with AirAsia, a popup dialog appears that pushes users to sign in, or create or link an account. The sign-up and and sign-in options are pushed with large font sizes and prominent, colored icons.
2. The option to book a flight is presented as a small, plain-text link "Continue as guest" at the bottom of the popup dialog. (SEE IMAGE 1)
3. During sign-up or log-in, users consent to the collection and use of Personal Information by Air Asia unless and until users inform Air Asia of the contrary. ^[2]
4. The privacy statement states that Personal Information will be shared within the AirAsia Group of Companies and Authorized Third Parties for promotions, offers, products and services which may or may not belong to AirAsia; the exact volume of communications is not specified.

"Information collection" section:^[3]

The information may be used to provide you with location-based services such as search results and marketing content.

"Use of information collected" section:^[3]

AirAsia and AirAsia Group of Companies who have access to this Personal Information with our permission and who need to know or have access to this Personal Information in order to: perform the service requested by you (including to make, administer, and manage reservations or handle payments, "single sign-on," and customer service); analyze how you use this Website and other websites belonging to AirAsia or AirAsia Group of Companies, improve and provide new and personalized offers, products and services, and marketing, for purposes of research, analytics, to develop and improve any existing and future products or services offered by us, to explore further potential initiatives, to optimise research, improve our forecasting abilities, and for other business purposes of AirAsia or AirAsia Group of Companies; detect, prevent, and investigate fraudulent transactions and/or activities, other illegal activities, and data breaches; internal (audit/compliance) investigations; or as otherwise required or permitted by applicable law.

"Sharing of Information Collected" section:^[3]

We may share your Personal Information to: data analytics, marketing agency, third party suppliers of products and services, business partners or service providers, parties which have business or contractual dealings with AirAsia and the AirAsia Group of Companies, and other third party who is able to demonstrate that you have explicitly consented to the disclosure of your Personal Information by us to such third party.

The same Privacy Statement does provide steps to "Manage your marketing communications,"^[3] which is a 3-step process assuming the user does this after creating their account and/or booking their flight. The steps highlighted on that page are:

1. Click on Account (your name with the user icon in the upper right side of the page)
2. Click on My Account
3. Click on Notifications Preferences

Users may not expect a high volume of emails from AirAsia, and might not review their account to manage their marketing preferences until after they begin receiving emails. At this time users will engage in the unsubscribe process.

The unsubscribe process is an 8-step process that takes eight clicks and user login, instead of the three suggested by AirAsia's Privacy Statement page:

1. User clicks on unsubscribe button at bottom of AirAsia promotional email.
2. Instead of directly unsubscribing the user or bringing them to an unsubscribe confirmation page, users are instead linked to their account "Notification Preferences" page where they have to log in.
3. After entering their log-in details, users have to also input a one-time password (OTP). This step takes at least five additional clicks, where the user has to:
   1. Click on their email tab or client (assuming they have it opened)
   2. Click on the AirAsia OTP email (if they do not receive it immediately, refreshing may incur additional clicks)
   3. Copy or remember the OTP, and click back to the AirAsia login tab
   4. Paste the OTP into the form
   5. Click continue
4. User is now on their Notification Preferences page where they get to see the 23 different types of AirAsia spam they never knew they opted into. Assuming they never wanted and don't want to continue receiving any of these spam emails, they would click on "Pause all emails".
5. User also has to click on "Pause all communications" if they wanted to stop spam from coming in through push notifications and WhatsApp.
   • Another dark pattern here from AirAsia is "Pause all communications," which implies the user would stop receiving any communications whatsoever. Users would typically want their booking emails, travel itinerary, etc., so they would not think of selecting this option.
   • The fine print above this button says, "Your account activities, transactional updates, payment updates, booking and delivery information are compulsory," meaning such emails will be delivered in any case and "communications" in "Pause all communications" really refers to promotional and marketing spam.