Travelers Beware: The Top Scams Targeting Tourists This Summer

Cybercriminals are ramping up efforts to steal money and banking details from travelers by creating fake websites that mimic real travel companies and booking platforms, according to Sergei Zolotukhin, a cybersecurity expert at F6. In an interview, he outlined the most common traps set for tourists.

Scammers build lookalike sites for airlines, train operators, and popular ticket aggregators. They promote these links through search results, ads in messaging apps and social media, and short videos on YouTube and TikTok. Zolotukhin advises booking tickets only through official mobile apps of airlines, carriers, or aggregators you’ve used before.

Be especially wary of deals that seem too good to be true—like significantly discounted tours or tickets. Ads for flash sales in chat groups or channels should also raise red flags. The same goes for fake hotel, resort, and rental property sites. Zolotukhin urges skepticism toward low-price rental offers and warns about the common “pay just 1 ruble” trick, which gives scammers access to your bank info.

Fake excursions are another hazard, advertised on phony travel company websites or even social media business pages of supposed guides. Victims are rushed with claims that spots are almost gone, but after paying a deposit, the scammer vanishes.

Scammers also target Russians planning trips to Asia and the Middle East, offering currency exchange at great rates and cash via QR-code ATMs. They ask for rubles transferred to a Russian card or phone number, but deliver nothing in return. Zolotukhin’s advice: never send money to strangers.

During peak vacation season, phishing sites mimicking official toll road payment systems appear. After entering a license plate, users see a fake “debt” and are asked to pay, then prompted for card number, expiry date, and CVV. Before a trip, download the official app of the transport operator from a trusted app store, and avoid clicking the first links in search results—scammers often use paid ads to push these fake sites.