Memorial Day is behind us, which means the summer travel season has officially arrived. Over the next three months, millions of Americans will take their annual vacations, both domestically and internationally. But as people plan these trips, they seem to be encountering more scams than ever. Here are the most common scams right now—and easy ways to protect yourself and your wallet.
The top 7 travel scams right now
According to a report from cybersecurity firm McAfee earlier this month, these are the top 7 types of travel scams travelers are most likely to fall for:
- Fake travel deals or promotions (15%)
- Scam booking confirmations and travel updates (15%)
- Manipulated or misleading accommodation listings (15%)
- Payment requests outside official platforms (11%)
- Fake vacation rental listings (10%)
- Fake airline or hotel websites (9%)
- Impersonation of airline or hotel customer service (9%)
The report, which includes data from a survey of 6,000 individuals in Australia, France, Germany, Japan, the United Kingdom, and the United States, also found that people reported losing significant sums to travel scams. Specifically, nearly half of those polled (48%) said they lost more than $500 to a travel-related scam.
And yes, artificial intelligence is partially to blame. As McAfee notes, “AI is making these scams faster to create, more convincing, and easier to scale.”
AI tools make it easy for scammers to vibe code fake apps or websites that mimic real ones. They make it possible to generate authentic-sounding emails or text messages that link to nefarious websites designed to steal your sensitive personal information, sell you non-existent travel packages, or scrape your payment details so they can use them elsewhere.
And speaking of fake apps, McAfee’s report says that the most commonly impersonated travel app is Tripadvisor, which is “cloned at roughly three times the rate of other major platforms, including Kayak, Expedia, and Booking.com.”
Other ways scammers are finding victims
But it’s not just pre-trip scams that summer travelers need to be worried about. McAfee’s report notes that scammers also target travelers once they’re on their trip, especially if they’re not careful.
Hackers and scammers often lurk on public Wi-Fi networks, such as those found in airports, cafes, and hotels. Public Wi-Fi networks are notoriously insecure—and simple for an experienced hacker to compromise. And once a victim engages with one of those compromised networks, a hacker can intercept their emails, messages, and financial information.
Scammers also place fake QR codes over real ones in public places like restaurants and hotels, a tactic known as quishing. When an unsuspecting victim scans the fake QR code, they are redirected to a scam website designed to steal their details.
Another very visceral and immediate way that scammers are taking advantage of travelers is via social media. If people post every moment of their trip to social media in near real time, and if their profiles are public, they can be at serious risk. Say you post a picture of your swanky hotel and tag its location. Bad actors can simply show up where the photos reveal you are, and nab the expensive jewelry you were wearing in the post. Just ask Kim Kardashian.
How to protect yourself from travel-related scams and risks
Thankfully, there are steps you can take to mitigate your chances of falling victim to travel scams and other risks while traveling.
The first is to slow down and take a breath before booking anything. If a deal seems too good to be true (a flight to Japan for just $100!), it probably is—no matter how authentic the website looks or the email sounds.
Scammers rely heavily on creating a sense of urgency to get you to hand over your payment information. If you can pause and resist the urge, and instead take the time to verify the URL you’ve been given or examine the email address to see if it is actually from the company it purports to be from, you’ll have a better chance of staying one step ahead of scammers.
You should also be wary of ever making a payment outside of official channels. No, a 5-star waterfront villa in the Maldives is never going to ask you to pay in bitcoin. Also, pay close attention to images included with hotel or apartment listings for inconsistencies (like a floor lamp with no base). Scammers have been known to use AI to generate fake photographs showing exquisite hotel rooms or entire buildings that don’t even exist.
As for the most common risks when already traveling, think twice before posting overly revealing photos on social media. Your ego may not get the praise it wants, but you could save your wallet—or physical self—a lot of pain. As for public Wi-Fi networks, if you must use them, make sure you are running a VPN on your smartphone or laptop first, and never scan a QR code without first checking to see if it may be a quishing attempt.
If you follow these strategies, you’ll have a much better chance at having an unforgettable (in a good way) vacation this summer.