Vacation Travel Scams Are Up A Whopping 900%

A vacation is a vacation, no matter the season. It's exciting! But, if you’re looking to squeeze in any last-minute travel this summer, beware of travel scams. There is a scam circulating that you need to be aware of.

The cost of everything continues to rise, so as conscience consumers, we are searching for the best deals online to book a memorable trip without breaking your budget. Cybercriminals have decided to capitalize on this need and are now using one scarily convincing, AI-generated phishing email that can cost victims way more than their vacation fund. Booking.com’s CISO, Marnie Wilking, shared that the organization has seen a 500% to 900% increase in travel-related scams in the past 18 months using this malicious tactic.

How does a travel scam like this work? Phishing emails aren't new to the Internet, but AI tools like ChatGPT are making it increasingly easy to create realistic, professional and tricky scam emails. It used to be that phishing emails were peppered with red flags like spelling and grammatical errors. But, with AI, it’s easier for cybercriminals to pump out dozens of seemingly legit emails that often go undetected by software and readers.

Here’s how they work:

Scammers will use sites like Booking.com or Airbnb.com that allow people to list their places as short-term rentals. Scammers then send out emails offering incredible rates or time-sensitive deals on nonexistent properties. After payment, the cybercriminals will either disappear with the money, leaving the renter without a place to stay, or use follow-up emails to collect additional “fees” or “charges” before vanishing. These vacation-focused phishing scams are NOT new. It's just that with AI, more people are falling for them because of the increasingly convincing emails.

What can you do?

Vacationers can take several key steps to ensure they’re not being duped by a travel scam.

1. Use two-factor or multifactor authentication, where applicable. Having a confirmation code sent to your phone every time you log in will help prevent phishing attacks and credential theft.
   
2. Avoid clicking on email links. If you receive an email promoting a "too good to be true" deal, remember, it likely is just that! Take the initiative and search the website for the special. If you can’t find it, there is a chance it was a scam.
   
3. Make sure contact information and reviews are readily available before booking ANYTHING online. Have other verified users stayed at the property? If so, it’s less likely to be a scam.
   
4. Use credit cards for online purchases. Using debit cards that are linked directly to your bank account is dangerous. When theft occurs from your debit card, it is difficult to get your money back – if at all. Using a credit card provides an additional layer of protection.

The most important thing is to stay vigilant against cyber scams.

Analyze every e-mail offer you receive and follow cyber security best practices. Standard security software can help detect some of these scam emails, but often not all of them, so it’s important to be cautious and look for red flags.

Personal scams may ruin a vacation, but business breaches can cost you and your family their livelihood. To keep your network secure, call our sibling company, Fortifi Cyber Security, at 888-500-9111 or click here for a free vulnerability scan. You can also schedule a consultation with our IT experts who can help you create an IT plan that protects you. We are here to help! Enjoy a well-deserved break this summer, and remember to be cybersmart.