Vacation Travel Scams Are Up 900%

Summer is a prime season for vacation travel, and if you're planning any last-minute getaways, there's a scam you need to be aware of. With rising costs for everything from food to travel, it makes sense to hunt for the best deals online to enjoy a memorable trip without overspending. However, cybercriminals are exploiting this need, and according to Booking.com, they're using highly convincing, AI-generated phishing emails that could cost you much more than your vacation budget. Marnie Wilking, Booking.com's Chief Information Security Officer, reports a staggering 500% to 900% increase in travel-related scams over the past 18 months, driven by this malicious tactic.

How are these scammers pulling it off? While phishing emails have been around since the early days of the Internet, AI tools like ChatGPT are now enabling the creation of realistic and professional-looking scam emails that are more likely to deceive recipients. Previously, phishing emails were often easy to spot due to spelling and grammatical errors. But with AI, cybercriminals can now generate dozens of seemingly legitimate emails that often evade detection by both software and readers.

Here's how the scam works:

Scammers exploit platforms like Booking.com or Airbnb.com, where individuals can list properties for short-term rentals. They send out emails offering incredible rates or urgent deals on fake properties. Once someone pays, the scammers either vanish with the money, leaving the renter stranded, or they send follow-up emails to extract additional "fees" or "charges" before disappearing.

To be clear, these vacation-related phishing scams are not new. The difference now is that AI makes these emails more convincing, leading to more people falling for them.

What can you do to protect yourself?

Here are some essential steps to avoid being scammed:

1. Use Two-Factor or Multifactor Authentication: Whenever possible, enable two-factor authentication. A confirmation code sent to your phone each time you log in can help prevent phishing attacks and credential theft.
2. Avoid Clicking on Email Links: If you receive an email promoting a deal that's too good to be true, it probably is. Instead, visit the website directly and search for the offer. If you can't find it, you may have dodged a scam.
3. Verify Property Listings: Before booking any property online, ensure that contact information and reviews are readily available. Check if other verified users have stayed at the property; this reduces the likelihood of it being a scam.
4. Use Credit Cards for Online Purchases: Avoid using debit cards linked directly to your bank account. If theft occurs with a debit card, recovering your money can be challenging. Credit cards offer an additional layer of protection.

The most crucial advice is to stay vigilant. Scrutinize every email offer you receive and adhere to cybersecurity best practices. While standard security software can detect some scam emails, it won't catch all of them, so it's vital to remain cautious and look out for red flags.

Personal scams may ruin a vacation, but business breaches can cost you and your family their livelihood. To keep your network secure, call us at 707-689-3999 or click here to book a FREE Cyber Strategy Session with our cyber security experts, who can help you create a plan that protects you. We are here to help! Enjoy a well-deserved break this summer, and remember to be cybersmart.