Travel fraud: How to protect yourself before you book a vacation

The convenience of online tools has simplified the process of planning and reserving the perfect holiday, yet such tools can introduce the risk of potential cyberattacks.

To protect yourself from travel fraud, keep the following tips in mind before you book your vacation.

1. Protect your unused reward points

Regular travellers often possess digital assets criminals find valuable, such as frequent flyer miles and loyalty points. Post-pandemic estimates  placed the value of unused U.S. airline rewards at US$27.5 billion (C$37.6 billion). With more people—including elite-status members—flying in the past few years, that value has likely grown substantially.

This entices fraudsters, who search for ways to take over these reward program accounts and either sell the points or use them to buy an array of retail merchandise.

For instance, an Ottawa man was targeted by a cyberattack that resulted in the loss of 200,000 Aeroplan loyalty points, sufficient for two round-the-world flights. What the hackers did with the points is unknown, but cybersecurity experts warn that any sizeable reward-program balance could be vulnerable.

Here are some ways to safeguard your points and reward miles:

• Keep your boarding pass private (it includes information about you and your frequent flyer account); do not post photos of it online, and be sure to discard it securely post-flight.
• Use a strong password  for your reward program accounts.
• Set up alerts for fraudulent activity on your accounts, just as you would for your bank accounts and credit cards.
• Use services that monitor the dark web for your phone number, email address or Social Insurance Number.

2. Watch for fraudulent websites

The ease and convenience of booking all travel arrangements online, from accommodations to car rentals, has increased the chance that people may enter personal information on a fraudulent website.

Designed to mimic the website of a reputable hotel, airline or car rental company, these sites capture and copy any information entered, including payment details.

Even though it’s tempting to speed through the process to secure the ideal flight time or the beachfront property rental with the best amenities, take a moment to confirm the following:

• The name of the online company is spelled correctly.
• It starts with “https” rather than “http.”
• A “tune” symbol—a circle and a dash on top of another circle and a dash in the opposite position—appears next to the website address. Click on it to access permission controls and additional security information.

Leading anti-virus software programs often detect illegitimate or fake websites, so consider investing in one. For those who already use one, ensure it’s up to date.

3. Book your trip through a trusted travel agent

Hiring a reputable travel agency can streamline planning, help you customize your trip and provide added peace of mind. Experienced travel agents know how to create the ideal holiday, work with well-known companies and provide secure payment methods.

Unfortunately, scammers have become adept at setting up fraudulent travel agencies, posing as agents to obtain your information and funds. To protect yourself, conduct thorough research before engaging with any agency. Ask for referrals from friends and check for online reviews and ratings from previous customers. Verify the agency’s contact information and check to make sure they have a physical office address.

Instagram, TikTok and Facebook make it easy to share news and experiences with family and friends, but your posts can also be a way for fraudsters to perform social engineering, a manipulative activity that encourages you to share confidential information.

For example, social engineers (fraudsters) can use photos you posted of a holiday a few years ago to design the perfect vacation package that appeals to you. They prey on your emotions and sentimentality to get you to enter your credit card information and book that trip.

To prevent your photos and other social posts from being used for social engineering, activate the privacy settings on your apps and social media platforms. This lets you control who can view your information and how much is accessible to others.

In addition, don’t post your travel plans on social media—doing so lets scammers know when you or your home may be vulnerable. Finally, ensure that everyone in your travel party agrees not to share any travel posts—including those incredible photos from the first day—until you return.

The bottom line

Researching websites and travel agencies, protecting your privacy and verifying all the details before booking your next vacation will help you enjoy safe travels. 

Portions of this article originally appeared on Rbcroyalbank.com and cnb.com .