Summer is a prime season for vacation travel, but if you're planning any last-minute trips, there's a scam you need to be aware of. As prices for everything from food to travel continue to rise, many people turn to the internet to find the best deals and save money. However, according to Booking.com, cybercriminals are exploiting this trend by using highly convincing, AI-generated phishing emails that can cost victims far more than their vacation budget. Marnie Wilking, Booking.com's Chief Information Security Officer, reported a staggering 500% to 900% increase in travel-related scams over the past 18 months due to this deceptive tactic.
How are these scammers pulling it off? Phishing emails have been around since the early days of the internet, but AI tools like ChatGPT are making it easier than ever to craft realistic and professional-looking scam emails. In the past, phishing emails were often filled with obvious spelling and grammatical errors. Now, with AI, cybercriminals can produce dozens of seemingly legitimate emails that are harder for both software and individuals to detect.
Here's how the scam works:
Scammers use platforms like Booking.com or Airbnb.com, which allow users to list short-term rental properties. They send out emails offering incredible rates or limited-time deals on fake properties. Once someone pays, the scammers either vanish with the money, leaving the renter without a place to stay, or they send follow-up emails to extract additional "fees" or "charges" before disappearing.
To clarify, these vacation-related phishing scams are not new. The difference now is that AI is making these emails more convincing, leading to more people falling for them.
What can you do to protect yourself?
Vacationers can take several key steps to avoid being scammed:
- Use Two-Factor or Multi-Factor Authentication: Whenever possible, enable two-factor authentication. Receiving a confirmation code on your phone each time you log in can help prevent phishing attacks and credential theft.
- Avoid Clicking on Email Links: If you receive an email offering a deal that seems too good to be true, it probably is. Instead of clicking on the link, go directly to the website and search for the offer. If you can't find it, you might have dodged a scam.
- Verify Contact Information and Reviews: Before booking any property online, make sure contact information and reviews are available. If other verified users have stayed at the property, it's less likely to be a scam.
- Use Credit Cards for Online Purchases: Avoid using debit cards linked directly to your bank account. If theft occurs with a debit card, it can be difficult to recover your money, if at all. Credit cards offer an additional layer of protection.
The most crucial thing is to remain vigilant. Scrutinize every email offer you receive and adhere to cybersecurity best practices. While standard security software can catch some scam emails, it won't catch all of them, so it's essential to be cautious and look for red flags.
Personal scams may ruin a vacation, but business breaches can cost you and your family their livelihood. To keep your network secure, call us at 914-923-0161 or click here to book a FREE consult with our cyber security experts, who can help you create a plan that protects you. We are here to help! Enjoy a well-deserved break this summer, and remember to be cybersmart.
