Cover Image for Your Guide to Safety: How to Protect Mobile Brands from Travel Scams.
Thu Oct 03 2024

Your Guide to Safety: How to Protect Mobile Brands from Travel Scams.

Travel mobile applications are susceptible to scams based on social engineering.

Every year, millions of people worldwide plan their vacations searching for sun, sea, and sand, using mobile apps to organize their trips. This summer, the number of scheduled flights has reached record levels, indicating an increase in travel demand. However, not everyone enjoys this experience, as the rise in the use of these platforms has also brought an increase in fraud.

Recently, it was reported that Booking.com has seen a rise of between 500% and 900% in travel-related scams over the past 18 months, the majority of which result from social engineering techniques. Banking institutions also reflect an increase in this type of fraud; for example, Lloyds Bank stated that fraud related to holiday purchases has risen by 7% in the past year, with average losses for victims of approximately £765.

The growth of mobile apps has made booking travel, excursions, and flights easier, but at the same time, it has allowed criminals to exploit this technology through social engineering strategies. Successful attacks can have serious consequences, including financial losses, identity theft, and feelings of confusion and fear among consumers.

One of the most common methods of fraud is "vishing," where scammers impersonate representatives of well-known companies to obtain personal information. In a typical attack of this type, a traveler receives a call from someone pretending to be from their travel app, claiming there is a problem with the booking and requesting personal data to confirm the transaction. This type of fraud is difficult to identify as the scammers can change their strategy based on the consumer's responses.

According to recent statistics, nearly 70% of working-age adults and IT professionals have experienced some form of vishing attack. The direct human interaction in these cases makes it harder to detect compared to fraud via emails. The importance of staying alert is crucial, as simply answering a call can pose a risk.

Moreover, scammers are beginning to adopt advanced technologies such as generative artificial intelligence, which further complicates the identification of these attacks, as it allows them to simulate voices and forge caller IDs. In this context, it is not enough for users to take precautions; brands are required to implement robust security measures.

Booking.com has urged hotels and travelers to use two-factor authentication as an effective way to protect against credential theft. However, the responsibility for protecting the app experience largely falls on the manufacturers, with 57.5% of users believing they should take the initiative in this task.

Mobile app developers must focus on creating features that add value and enhance user experience, but it is also crucial that they address cybersecurity. The adoption of automated solutions that reinforce defenses against social engineering attacks in mobile apps is essential. These modern solutions allow development teams to concentrate on innovation while ensuring that every new version of the app is protected without the need for additional manual work.

Travel should be a pleasant experience, and for this, travel brands and mobile apps need to take proactive measures to combat cyber fraud, thereby protecting their users. Without a solid focus on cybersecurity, they risk losing consumer trust, which in turn affects their reputation and ability to attract new customers.