SECURITYTravel Booking Scams: Fake Airline and Booking Sites Target UAE Travellers

Travel Booking Scams: What Kaspersky Found and How to Stay Safe

Scammers copy trusted travel brands to steal payment details and banking logins. Kaspersky reported nearly 270,000 cyberattack attempts disguised as well-known travel brands between the second quarter of 2025 and the first quarter of 2026.

The numbers

• Emirates was the most impersonated transport brand, at 61% of transport-related phishing detections. Uber was next at 37%.
• Among malicious files linked to transport brands, 30.5% were Trojans and 22.5% were Trojan-Banker malware, which is built to steal banking credentials.

Impersonation does not mean the brand was breached. It means scammers copy the name and design.

Scams the report described

• Fake compensation: messages in the name of an airline (Ryanair in the example) say you are owed flight compensation, then ask for account details or a small “processing fee” before the offer expires. Kaspersky notes legitimate airlines do not ask for upfront payment to process refunds or compensation.
• Fake booking pages: copies of Booking.com collect personal and payment details. Some victims found out only on arrival, when no booking existed.

How to book safely

1. Book only through the official website or app, typed in yourself.
2. Check the web address carefully before entering payment details.
3. Be wary of heavy discounts and any offer demanding immediate action.
4. Use strong, unique passwords and turn on multi-factor authentication.
5. Download travel apps only from official app stores.
6. Check your bank and card statements regularly.

If you receive a suspicious call or message, see how to report it.

Related: do flight prices go up when you search repeatedly, and what actually helps when you compare fares.