- Travel businesses are warned of an AI-fuelled fraud surge.
- Around 90pc of attacks stem from human error.
- AI enables automated phishing, deepfakes and fake payment links.
- Travel staff oversharing and supply-chain weaknesses are key risks.
- Recommended safeguards include training, multi-factor authentication and audits.
Travel firms have been cautioned about a tsunami of fraud driven by artificial intelligence. Experts at industry events noted AI has made hacking far easier with human error behind most attacks. Around 90pc of attacks stem from human error such as weak passwords or phishing.
Travel staff oversharing and supply-chain weaknesses were highlighted as key risks. Rising reports of fake Booking.com payment links were noted. AI has lowered the technical barrier for cybercriminals enabling automated hyper-realistic phishing emails, deepfakes and bogus payment links.
Recommended safeguards include continuous employee training, strong authentication, secure remote access and third-party audits. Travel firms are advised to verify requests with multi-person sign-off rules for bank transfers and refunds. Monitoring digital booking platforms and customer-facing AI agents regularly is also recommended.
Jenny Radcliffe cyber security expert shared “AI has made it drastically easier for criminals to scale and refine their operations.”
The EU Commission shared: “The investigation concerns the suspicion… that Booking.com is not doing enough to prevent online fraud and online scams on its network,”
Booking.com shared: “We are cooperating fully with the European Commission and engaging constructively on its questions under the Digital Services Act (DSA). Security, trust and the protection of personal information are top priorities at Booking.com. We remain committed to working with relevant governments, regulators, law enforcement and industry partners to combat cybercrime and online fraud, and protect travellers and partners.”
