Travel Scams Evolve with AI, Threatening Consumer Security

Travel scams have evolved beyond simple pickpocketing to become highly sophisticated operations, increasingly utilizing artificial intelligence tools to deceive consumers. Florent Silve, an executive at corporate travel management platform Engine, noted that AI enables scammers to create more convincing fake websites and exploit stolen data, making it significantly harder for individuals to distinguish legitimate communications from fraudulent ones. This shift means that scams no longer appear out of place but rather mimic expected communications from travel providers.

According to a June report from the Federal Trade Commission (FTC), Americans reported losses totaling $3.5 billion to impostor scams in the past year. While not all of these were travel-related, impostor scams constituted nearly one in three fraud reports, making it the most frequently reported category of fraud. These scams can occur at various stages of travel planning, including before departure, with scammers impersonating airlines or hotels to intercept or manipulate existing reservations and communications. Iskander Sanchez-Rola, a scam expert at cybersecurity company Norton, emphasized that the most dangerous scams are those that appear normal and expected, rather than obviously suspicious.

A prevalent and sophisticated scam identified by Sanchez-Rola is "reservation hijacking." In this scheme, scammers send deceptive emails or text messages impersonating legitimate hotels. These messages typically claim an issue has arisen, such as a payment failure, and demand immediate action from the traveler. The effectiveness of these scams is amplified by the scammers' ability to acquire and use real customer or hotel data, lending an air of authenticity to their fraudulent communications. Scammers often gain access to hotel systems by phishing hotel employees for login credentials, which then allows them to access genuine reservation details from hotels or booking services. This enables them to send targeted and highly believable fraudulent messages to travelers who are expecting to interact with their booked accommodations.

To mitigate the risks associated with these evolving travel scams, experts recommend several protective measures. Travelers should exercise extreme caution with unsolicited communications regarding their travel plans, even if they appear to come from reputable sources. Verifying information directly with the hotel or airline through official channels, rather than clicking on links or responding to requests in suspicious messages, is crucial. Using strong, unique passwords for all online accounts, especially those related to travel bookings and personal information, can also help prevent data breaches that fuel these scams. Furthermore, travelers should be wary of unusually low prices or deals that seem too good to be true, as these can be bait for fraudulent booking sites. Maintaining updated antivirus software and being vigilant about phishing attempts are ongoing necessities for online security. The increasing sophistication of travel scams underscores the need for heightened awareness and proactive security practices among all travelers.