[REVISION HISTORY]

Cybersecurity and privacy risks for travelers

Updated 4 times since CLSTR started tracking revisions of this situation.

What changed

2026-09-10 14:48 UTC → 2026-09-14 01:43 UTC · added ~~removed~~

Travelers face escalating digital and physical security threats. Research identified approximately 262,663 malicious detections targeting travel brands between mid-2025 and early 2026, with Emirates and Uber being frequently impersonated. Beyond digital phishing, experts now warn of physical privacy risks in accommodations, such as hidden cameras in electronic devices. In the United States, the Federal Trade Commission reported that Americans lost $3.5 billion to various scams last year, with impostor scams being the most frequent category. Scammers are increasingly utilizing artificial intelligence to create highly convincing fake websites and leverage stolen data. A growing method is ‘reservation hijacking,’ where imposters pose as hotel staff via email or text, often claiming payment failures to prompt immediate action. These criminals frequently phish hotel staff to obtain legitimate traveler information, making fraudulent messages appear expected rather than suspicious. Highly targeted phishing attacks continue to utilize accurate reservation data. In South Africa, the South African Travel and Tourism Association (SATSA) linked incidents involving fraudulent WhatsApp and email messages to a data-related issue at Semper, a property-management software provider. Semper’s CEO, Eben Marais, confirmed the incident and noted that clients were alerted during the investigation. Fraud rings are also evolving to mimic legitimate traveler behavior, making traditional identity indicators less reliable. A report from Riskified noted a 32% year-over-year increase in flight fraud risk as of May 2026, noting that last-minute bookings within seven days of departure are 2.3 times riskier. ~~In response, businesses~~ Experts from Norton warn that these scams can begin even before a trip commences, as attackers pose as hotels or airlines during the period when travelers are ~~increasingly adopting ‘Zero Trust’ security frameworks.~~ actively awaiting travel information. Florent Silve of the travel management platform Engine noted that technological advancements make it significantly harder for consumers to distinguish between authentic and fraudulent sites.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.