Cybercriminals pivot tactics: using genuine bookings to scam travelers

With summer just a month away, millions of flights are booked and hotels are ready for the rush. However, travelers must stay sharp: cybercriminals are already lying in wait, looking to profit from the Reservation Hijack Scam

In mid-May, many people already have their summer vacations planned. Cybercriminals have found a cyber scam called Reservation Hijack Scam to target travelers, taking advantage of that moment of excitement before the vacation.

The difference compared to traditional frauds is significant: it is no longer poorly written messages or easily identifiable emails.

The attackers now use authentic information related to real reservations to create scams that are practically impossible to distinguish.

The fraud begins when criminals gain access to legitimate information linked to a travel reservation.

The attackers can use authentic conversations, data from compromised hotels, or even stolen credentials from platforms used to manage vacation accommodations.

With that information, they craft extremely convincing messages: they include the exact name of the establishment, stay dates, reservation details, and even payment-related information.

The victim receives an apparently official communication indicating, for example, that there is a problem with the reservation, that a bank card needs to be verified, or an additional payment is required to keep the room confirmed.

And that's precisely where the danger lies. The attack occurs when the user has already booked . The fraud happens once the person has confirmed the accommodation.

That psychological moment is key. The user believes they have completed the entire process and lets their guard down. From there, the scammers take advantage of the urgency.

A message may alert of a supposed issue with the payment, a pending verification, or an administrative problem. In many cases, they even use channels that seem official or messages integrated within widely known platforms. The level of customization makes this technique a particularly effective threat.

The evolution of these campaigns coincides with the increasing use of artificial intelligence tools by criminal groups.

AI allows for drafting impeccable messages, adapting languages, personalizing content, and generating communications that perfectly mimic the style of real hotels or platforms.

A few years ago, many frauds could be detected by spelling errors, poor translations, or generic messages. That has practically disappeared.

Now communications can seem completely natural and be tailored to each user.

Although this fraud is much more sophisticated, there are still some elements that can betray it.

It is recommended to be particularly wary when situations arise such as:

It is also advisable to carefully review web addresses. Cybercriminals use domains that are visually very similar to legitimate pages to deceive the user for just a few seconds.

The so-called reservation hijacking is just part of the problem. The tourism activity is also causing an increase in other digital frauds related to travel and massive events.

There are also campaigns based on false results, fraudulent profiles on social networks , non-existent promotions, and illegal ticket sales.

Many criminals take advantage of the fear of being left without accommodation or access to an important event to accelerate impulsive decisions.

The main recommendation remains simple: pause before acting .

In the face of any unexpected message related to a reservation, it is advisable to access the original platform directly or the hotel using official channels.

It is also recommended to enable two-step authentication, use different passwords, and avoid entering bank details after clicking links received through messages.

And beware, no spectacular discount, urgent offer, or last-minute problem justifies acting in haste.

In mid-May, many people already have their summer vacations planned. Cybercriminals have found a cyber scam called Reservation Hijack Scam to target travelers, taking advantage of that moment of excitement before the vacation.

The difference compared to traditional frauds is significant: it is no longer poorly written messages or easily identifiable emails.

The attackers now use authentic information related to real reservations to create scams that are practically impossible to distinguish.

The fraud begins when criminals gain access to legitimate information linked to a travel reservation.

The attackers can use authentic conversations, data from compromised hotels, or even stolen credentials from platforms used to manage vacation accommodations.

With that information, they craft extremely convincing messages: they include the exact name of the establishment, stay dates, reservation details, and even payment-related information.

The victim receives an apparently official communication indicating, for example, that there is a problem with the reservation, that a bank card needs to be verified, or an additional payment is required to keep the room confirmed.

And that's precisely where the danger lies. The attack occurs when the user has already booked . The fraud happens once the person has confirmed the accommodation.

That psychological moment is key. The user believes they have completed the entire process and lets their guard down. From there, the scammers take advantage of the urgency.

A message may alert of a supposed issue with the payment, a pending verification, or an administrative problem. In many cases, they even use channels that seem official or messages integrated within widely known platforms. The level of customization makes this technique a particularly effective threat.

The evolution of these campaigns coincides with the increasing use of artificial intelligence tools by criminal groups.

AI allows for drafting impeccable messages, adapting languages, personalizing content, and generating communications that perfectly mimic the style of real hotels or platforms.

A few years ago, many frauds could be detected by spelling errors, poor translations, or generic messages. That has practically disappeared.

Now communications can seem completely natural and be tailored to each user.

Although this fraud is much more sophisticated, there are still some elements that can betray it.

It is recommended to be particularly wary when situations arise such as:

It is also advisable to carefully review web addresses. Cybercriminals use domains that are visually very similar to legitimate pages to deceive the user for just a few seconds.

The so-called reservation hijacking is just part of the problem. The tourism activity is also causing an increase in other digital frauds related to travel and massive events.

There are also campaigns based on false results, fraudulent profiles on social networks , non-existent promotions, and illegal ticket sales.

Many criminals take advantage of the fear of being left without accommodation or access to an important event to accelerate impulsive decisions.

The main recommendation remains simple: pause before acting .

In the face of any unexpected message related to a reservation, it is advisable to access the original platform directly or the hotel using official channels.

It is also recommended to enable two-step authentication, use different passwords, and avoid entering bank details after clicking links received through messages.

And beware, no spectacular discount, urgent offer, or last-minute problem justifies acting in haste.

Become a premium member for free!