If you’re traveling this holiday season or even if you’re staying home, be on the lookout for travel scams. Cybercriminals are targeting travelers by creating phishing emails that mimic flight confirmations. These emails are designed to trick you into clicking malicious links or sharing personal information, putting you at risk.
How the Scam Works
Scammers will send you an email to confirm a flight you never booked. It could include urgent messaging, like “action required” or “your payment is incomplete” to prompt a quick response. Clicking links in these emails could take you to phishing websites or it might prompt the installation of malware on your device.
How to Spot a Phishing Email
-
Unexpected Confirmations: Be suspicious of flight confirmations for trips you didn’t book.
-
Sender’s Email Address: Check if the email address matches the airline or travel company you used.
-
Generic Greetings: Legitimate emails usually address you by name, not as “Dear Customer.”
-
Spelling Errors: Typos and odd formatting are often signs of phishing, but AI is getting sophisticated in fixing these and scammers are too, so be careful.
Protect Yourself from Flight Confirmation Scams
-
Verify the Details: If an email seems suspicious, don’t click any links. Contact the airline or travel agency directly using their official website or customer service line.
-
Avoid Clicking Links: Never click any links or download attachments, unless you’re certain they’re legitimate.
-
Use Trusted Sources: Always verify flight details using the airline’s app or website.
-
Report Suspicious Emails: If the message was received in your personal email, move it to the Report Junk folder and be sure to block the sender. If you receive a suspicious email message on an HM device, report it immediately by clicking the Report Phish button. Reporting helps protect our patient data and systems from potential threats.
