The New Economics of Travel Payment Fraud: Why Merchants Are in the Crosshairs
Payment fraud has entered a new phase, and the travel industry is among the most exposed. Adyen’s latest research report, “Fraud’s Identity Crisis,” reveals that while traditional fraud losses on its global platform fell by 20% in 2025, this aggregate improvement masks a troubling shift in how fraud is being executed. The average value of fraudulent disputes dropped nearly 25%, meaning criminals are spreading their efforts across more frequent, lower-value transactions rather than chasing single large hits. For travel merchants processing bookings across airlines, hotels, and cruise lines, this creates an environment where fraud is harder to detect and easier to scale.
The travel sector faces particularly severe exposure. According to the Adyen research, 79% of businesses in travel anticipate that fraud will limit their growth in the coming years, one of the highest rates of any industry surveyed. That figure should land loudly for merchants and operators who are already working thin margins on high-value bookings. When a fraudster manipulates a refund request on a cruise cabin or exploits a loyalty promotion on a hotel booking, the losses compound quickly, and the complexity of cross-partner ecosystems makes recovery even harder.
First-Party Fraud: The Threat Already Inside Your Walls
The most significant development in the research is the rise of first-party fraud, now the most prevalent threat at 44% of reported cases, surpassing traditional stolen-card fraud (36%). First-party fraud involves customers who use their own identities to exploit policies, whether that means filing false refund claims, abusing promotional offers, or manipulating booking timelines to extract value.
Travel merchants are especially vulnerable to this category because loyalty programs, flash sales, and time-limited promotions create exactly the conditions fraudsters exploit. The Adyen report notes that 40% of businesses reported that high-volume events like flash sales and loyalty programs exacerbated policy and promotion abuse. When a “buy one, get one” cruise offer or a deeply discounted non-refundable hotel rate goes live, bad actors are already running scripts to capture the inventory before legitimate customers can act. The line between aggressive deal-hunting and serial abuse is increasingly blurred, and merchants have limited tools to distinguish between the two.
The cost of handling first-party disputes has climbed to an average of $82 per case, up from $74 the prior year. For high-volume travel operators, that arithmetic compounds fast, especially when you factor in the manual review capacity required to contest fraudulent chargebacks rather than simply accepting them.
AI Has Lowered the Barrier for Booking Fraud
Visa’s Spring 2026 Biannual Threats Report, also released this week, provides a closely aligned read on how fraud is evolving. According to the report, AI has fundamentally lowered the barrier to entry for payment fraud. What once required deep technical skill can now be executed with a prompt. Fraudsters are using AI to create more personalized scams, automate workflows, and adjust tactics at speed that outpaces most merchant defenses.
The numbers from Visa are striking. Nearly $1 billion in scam activity was identified between July and December 2025 alone. AI-generated content, voice impersonation, and deepfake media are increasing the reach and credibility of fraudulent schemes targeting both consumers and merchants. For travel operators, this means fake booking confirmations, counterfeit hotel vouchers, and AI-cloned customer identities are no longer edge-case threats. They are operational realities that require a response.
Authorization controls have proven insufficient against this wave because transactions can appear entirely legitimate when the cardholder approves them themselves. This is the central challenge for travel merchants: the payment may clear, the booking may be confirmed, and weeks later a chargeback arrives with a plausible consumer complaint that is difficult to dispute. Detection efforts are expanding to include identity verification, intent analysis, and behavioral indicators of manipulation, but the travel industry’s fragmented ecosystem of OTAs, wholesalers, and direct booking engines makes consistent implementation nearly impossible.
False Declines Are Costing You Real Revenue
One of the more underappreciated findings in the Adyen research is the revenue impact of false declines. Half of businesses report increases in legitimate customers being blocked, with static rules rejecting up to 10% of valid transactions. For travel merchants, where average booking values run high and customer conversion is already difficult, a 10% false decline rate is a material revenue leak that most operators never quantify.
Travel merchants must move beyond static defenses toward dynamic, behavior-based identification that assesses intent over time. This means moving away from simple velocity rules and toward trust-scoring systems that weigh device signals, booking patterns, and historical behavior against real-time risk indicators. It also means accepting that fraud management is no longer a cost center. It is a growth enabler, and operators who treat it that way will have a structural advantage in the years ahead.
What Operators Should Do Now
The research points to several concrete steps travel merchants can take immediately. First, audit your refund and dispute handling processes. First-party fraud is now the dominant threat category, and many operators are still optimized for card-not-present fraud that no longer is the primary risk vector. Second, evaluate your false decline exposure. If you do not know what percentage of your valid orders are being rejected by automated fraud rules, that is the first problem to solve. Third, invest in identity verification that can distinguish between synthetic identities and genuine customers, particularly for high-value bookings where the economics justify stronger verification controls.
The fraud landscape has shifted. The criminals are faster, more automated, and more willing to exploit trust relationships that merchants have built with their customers. The operators who treat fraud detection as a strategic capability rather than a back-office function will be the ones who protect their margins and their customers in the period ahead.
Sources: Adyen “Fraud’s Identity Crisis” Research Report, 2026; Visa Spring 2026 Biannual Threats Report.
