Vacation Travel Scams Are Up 900%

Summer is a prime season for vacation travel, but be cautious of a new scam targeting last-minute travelers. With rising costs in food and travel, many people are searching online for the best deals to plan an affordable getaway. Unfortunately, cybercriminals are exploiting this trend by using a highly convincing, AI-generated phishing email that could end up costing victims much more than their vacation budget. Marnie Wilking, the Chief Information Security Officer at Booking.com, reported a staggering 500% to 900% increase in travel-related scams over the past 18 months, driven by this malicious strategy.

How are these scammers operating? While phishing emails have been around for as long as the Internet, AI tools like ChatGPT now enable the creation of realistic and professional-looking scam emails that are more likely to deceive recipients. Previously, phishing emails were often marked by spelling and grammatical errors, but the advent of AI allows cybercriminals to produce numerous convincing emails that can slip past detection by both software and individuals.

Here's their method:

Scammers exploit platforms like Booking.com or Airbnb.com, where users can list properties for short-term rentals. They send emails promoting unbelievable rates or urgent deals on fake properties. Once someone pays, the scammers either vanish with the money, leaving the renter without accommodation, or continue to extract additional "fees" through follow-up emails before disappearing.

It's important to note that these vacation-targeted phishing scams are not new. However, the use of AI has made them more convincing, leading to an increase in victims.

What can you do?

Travelers can take several precautions to avoid falling victim to these scams:

1. Implement two-factor or multifactor authentication when possible. Receiving a confirmation code on your phone each time you log in can help prevent phishing attacks and credential theft.
2. Avoid clicking on links in emails. If you receive an email offering a deal that seems too good to be true, it probably is! Instead, visit the website directly and search for the offer. If it's not there, you might have dodged a scam.
3. Before booking any property online, ensure that contact information and reviews are easily accessible. If other verified users have stayed at the property, it's less likely to be a scam.
4. Use credit cards for online transactions. Debit cards linked directly to your bank account pose a risk; recovering funds from a debit card theft can be challenging, if not impossible. Credit cards offer an additional layer of protection.

Above all, remain vigilant. Carefully scrutinize every email offer you receive and adhere to cybersecurity best practices. While standard security software can catch some scam emails, it won't catch them all, so it's crucial to be cautious and watch for warning signs.

Personal scams may ruin a vacation, but business breaches can cost you and your family their livelihood. To keep your network secure, call us at 630-320-3723 or click here to book a FREE Consult with our cyber security experts, who can help you create a plan that protects you. We are here to help! Enjoy a well-deserved break this summer, and remember to be cybersmart.