Holiday scams and how to beat them

School’s out for the summer and the heatwave has hit! As we start to think about holidaying, many of us will turn to online travel agents (OTA) to book that last-minute deal. As OTAs have grown in popularity, so too has the opportunity for scammers to target a new breed of online consumers. We should all be aware of the wave of digital scams that will accompany this trend.

In 2018, more than 5,000 tourists fell victim to holiday scams, resulting in average losses of £1,380 and a total of £7 million, according to Action Fraud. And of course, it’s not just down to financial strain. The emotional distress travelers experience at the hands of fraudsters can be equally damaging. 

From fake plane tickets to accommodation spoofs, online holiday booking has become both incredibly convenient and risky at the same time as fraudsters become increasingly more sophisticated.

Let’s take a look at a few of the biggest scams and how to avoid them:

1. Watch out for fake websites

It won’t surprise you that over half of reported online holidays scams were down to fake airline ticket sales. ABTA’s 2018 report noted that 53% of tourists were lured into booking a flight on a fake website for a nonexistent flight.

If you stumble across a website that offers you too-good-to-be-true flights, there’s probably a reason, so do your due diligence and learn to spot these fake sites. They may be previously unknown domains such as ‘www.theflightdealofyourlife.com’ – an OTA you probably haven’t heard of before so check whether it uses ‘https’ which offers more validity than ‘http’, or if it’s a more popular OTA such as Expedia, use your search engine if you’re not sure whether ‘www.expediaholidays.org’ is the real site. 

To avoid booking accommodation via a fake site, consider calling the owner or agent directly, and asking for the full address of the property to cross-reference with Google Maps.

Research, research, and research again – the key to online research lies in both the quality and quantity of the reviews. Look for the quality of images on the sites, and check if the companies are members of professional associations such as ABTA or ATOL. 

2. Beware the airport WiFi

With free WiFi pretty much a modern essential, it’s easy for tourists to connect when travelling whether it’s at the airport, hotel or local cafe. But, tourists need to look out for those unsecured networks that allow you to connect without a login and with no stated user terms. The problem with these networks is that your personal and private data can be easily exposed and thus, sharing bank details, financial information or any other sensitive data over these networks is incredibly risky.

If you really need to connect to unsecured wifi networks, make sure you keep your browsing to very dull searches – don’t check work email, don’t bank online, don’t purchase anything using your credit card details! If you’re travelling and need to work, speak to your IT teams about VPNs and logging into corporate networks securely. 

3. Double-check those deals

Let’s be honest, we all love a deal! However, as fraudsters increasingly look for new ways to con tourists out of money, we need to be extra cautious of those unsolicited emails that all too often seem perfectly legitimate but that may in fact harbor fake scams.

Phishing emails are in abundance, especially in the financial services, retail and travel sectors, so be aware that hackers can easily impersonate a brand’s primary domain. You may click on a link in an email that says you’re visiting “www.trailfinders.com” assuming it’s a legitimate site, but that domain may well have been hijacked and then used to harvest your data. As a user, there’s not much you can do about this apart from to avoid clicking these links.

Check the site’s authenticity and use trusted websites rather than clicking on links that take you through to competitions and last-minute deals or that redirect you to a new website altogether. 

We all work hard year-round and our holidays are there to enjoy stress-free with family and friends. But with so much fraud clouding our every day, it’s often hard to make that a reality. Yet, with a few simple steps, you can ensure you’re on your way to out-scamming the scammers before they’ve had a chance to make your holiday a washout.

If you work within the travel industry and want to ensure you’re protecting your customers from email scams being carried out in your name, then get in touch with the Red Sift team or check your DMARC status online, for free.

Check email DMARC setup

PUBLISHED BY

Red Sift

31 Jul. 2019

SHARE ARTICLE:

Categories

Recent Posts

VIEW ALL
Awards

Red Sift named a Top 50 company in 2025 Emerging Stars Awards

Jack Lilley

We’re pleased to share that Red Sift has been named Best Performing Company – Security & Infrastructure in the 2025 Emerging Stars Awards. These awards, part of the Megabuyte100 series, recognise the UK’s 50 best-performing scale-up technology companies based on solid financial performance, from over 800 entries.  Being recognised in this category reflects the…

Read more
DMARC

Mailgun and Red Sift partner to boost email programs with stronger authentication  

Rebecca Warren

Senders know that email is a critical channel for driving customer engagement and establishing trust, yet deliverability and security issues can disrupt email programs. Mailgun, a leader in cloud-based email delivery, is providing free DMARC reporting for all Mailgun senders courtesy of Red Sift OnDMARC. This integration brings senders complete visibility into authentication results…

Read more
DMARC

Over 60% of healthcare organizations remain unprotected against data breaches

Sean Costigan

Introduction Red Sift’s analysis of healthcare organizations that reported large breaches to the Department of Health & Human Services (HHS) in 2023-2024 uncovered a troubling trend: post-breach, 61% remain unprotected against phishing and domain spoofing due to weak or nonexistent DMARC policies. DMARC (Domain-based Message Authentication, Reporting & Conformance) is a widely recognized security…

Read more
Awards

Red Sift wins 2025 Cybersecurity Excellence Award for OnDMARC

Jack Lilley

Executive Summary: Red Sift OnDMARC has been recognized with the 2025 Cybersecurity Excellence Award for its advanced email security solutions. By leveraging AI-powered tools like Red Sift Radar for security issues and Dynamic DNS Guardian for real-time monitoring, OnDMARC provides businesses with robust protection against phishing, spoofing, and business email compromise (BEC).  Key takeaways:…

Read more