With Indians travelling more than ever, cybercriminals are capitalising. Cybersecurity firm Kaspersky has issued a warning about sophisticated scams targeting booking platforms and digital payments, putting travellers' finances and data at risk.
A New Digital Minefield for Travellers
The thrill
of planning a vacation often involves a flurry of online activity, from hunting for the best flight deals to booking the perfect hotel. But this digital convenience has a dark side. Cybercriminals are increasingly targeting the travel and tourism sector, exploiting the urgency and excitement of travellers to steal money and personal information. According to cybersecurity experts at Kaspersky, travellers are attractive targets precisely because their focus is on discovering new places, not on digital security. They often use unfamiliar Wi-Fi networks, make quick decisions on bookings, and are more susceptible to scams that prey on this mindset. This has led to a surge in threats specifically designed to intercept payments and compromise booking accounts.
The Rise of Fake Booking and Phishing Scams
One of the most common threats involves phishing attacks and fraudulent websites that impersonate legitimate travel companies. Scammers create convincing fake web pages for airlines, hotel aggregators, and transport services that are almost indistinguishable from the real thing. An unsuspecting traveller might click a link in a 'special offer' email, land on one of these sites, and enter their credit card details to make a booking, only to find the payment has gone directly to a criminal and their reservation doesn't exist. These phishing attempts often create a sense of urgency, with messages about 'last-minute deals' or 'flight compensation' to pressure users into acting without thinking. Kaspersky advises travellers to always book directly through official websites or verified apps instead of clicking on unsolicited links from emails or social media messages.
Navigating Digital Payment Dangers Abroad
Digital payments, especially through UPI and QR codes, have made transactions seamless. However, these systems are also being exploited. Kaspersky has highlighted specific risks, such as fraudulent QR codes at merchant locations. Scammers may physically paste their own malicious QR code over a legitimate one at a shop or restaurant. When a tourist scans it to pay, the money is redirected to the scammer’s account. Another common tactic is the 'collect request' fraud, where a scammer sends a payment request on a UPI app, tricking the user into thinking they are receiving money or a refund. If the user enters their PIN to approve the request, they end up losing money instead. The cardinal rule is simple: you never need to enter your PIN to receive money.
Malware, Spyware, and Insecure Wi-Fi
Beyond direct payment fraud, travellers face risks from malicious software. Kaspersky's research has identified millions of web threats, including password stealers, spyware, and backdoors that allow attackers to gain unauthorised access to devices. These can be hidden in seemingly harmless travel-related apps, such as currency converters or city guides, downloaded from unofficial sources. Once installed, this malware can monitor user activity, steal login credentials for banking and travel accounts, and collect sensitive personal data. Connecting to public Wi_Fi networks at airports, cafes, and hotels without protection is another major vulnerability. Using a Virtual Private Network (VPN) is highly recommended to encrypt your internet connection, making it much harder for criminals to intercept your data on these shared networks.
Your Action Plan for a Secure Trip
Protecting yourself doesn't require being a cybersecurity expert, but it does demand vigilance. First, always doublecheck website URLs for spelling errors before entering payment details. Book directly on official platforms and be wary of deals that seem too good to be true. For all your travel related accounts, use strong, unique passwords and enable multi factor authentication (MFA) as an extra layer of security. When making payments, especially with QR codes, verify the merchant name before approving the transaction. Finally, regularly monitor your bank and card statements during and after your trip to spot any suspicious activity immediately. A few proactive steps can ensure your focus remains on enjoying your travels, not recovering from a digital mishap.
