Summer is a prime season for vacation travel, and if you're planning any last-minute trips, there's a scam you need to be aware of. As expenses for everything from food to travel continue to rise, it makes sense to seek out the best online deals to book a memorable trip without overspending. However, cybercriminals are exploiting this need with a highly convincing, AI-generated phishing email that could end up costing you far more than your vacation budget. According to Booking.com, there has been a staggering 500% to 900% increase in travel-related scams over the past 18 months, largely due to this malicious tactic, as noted by their CISO, Marnie Wilking.
How are these scammers pulling it off? While phishing emails have been around since the early days of the Internet, AI tools like ChatGPT are making it easier to create realistic and professional-looking scam emails that are more likely to deceive recipients. Previously, phishing emails were often easy to spot due to spelling and grammatical errors. Now, with the help of AI, cybercriminals can produce dozens of seemingly legitimate emails that are harder for both software and individuals to detect.
Here's how the scam works:
Scammers exploit platforms like Booking.com or Airbnb.com, which allow users to list their properties as short-term rentals. They send out emails offering incredible rates or time-sensitive deals on non-existent properties. Once a victim makes a payment, the scammers either disappear with the money, leaving the renter stranded, or continue to send follow-up emails to extract additional "fees" or "charges" before vanishing.
It's important to note that these vacation-related phishing scams are not new. The difference now is that AI is making these emails more convincing, leading to more people falling for them.
What can you do to protect yourself?
Vacationers can take several critical steps to avoid being scammed:
- Use two-factor or multifactor authentication where possible. Receiving a confirmation code on your phone each time you log in can help prevent phishing attacks and credential theft.
- Avoid clicking on email links. If you receive an email promoting a deal that seems too good to be true, it probably is. Visit the website directly and search for the offer. If you can't find it, you may have avoided a scam.
- Before booking any property online, ensure that contact information and reviews are available. Have other verified users stayed at the property? If so, it's less likely to be a scam.
- Use credit cards for online purchases. Debit cards linked directly to your bank account are risky. If theft occurs, recovering your money can be difficult—if not impossible. Credit cards offer an additional layer of protection.
The most crucial step is to stay vigilant. Scrutinize every email offer you receive and follow cybersecurity best practices. While standard security software can detect some scam emails, they won't catch them all, so it's essential to be cautious and look for red flags.
Personal scams may
ruin a vacation, but business breaches can cost you and your family their
livelihood. To keep your network secure, call us at 410-535-4332 or click here to book a FREE consult with our cyber security experts, who can help you create a plan
that protects you. We are here to help! Enjoy a well-deserved break this
summer, and remember to be cybersmart.