The FTC Is Sounding the Alarm: Summer Travel Scams Are Surging in 2026
Summer 2026 is shaping up to be a record travel season, and fraudsters are working overtime to profit from it. The Federal Trade Commission has issued fresh warnings about a sharp rise in vacation scams, while new research shows that more than one in three travelers has encountered fraudulent travel offers on social media in the past year alone.
For travel merchants, tour operators, and booking platforms, this is not just a consumer protection problem. Scams erode trust in the entire travel ecosystem, drive chargebacks, and create operational headaches that can linger long after a single fraudulent transaction. Understanding the threat landscape is no longer optional.
The Scale of the Problem
According to data cited by Total Defense, consumers reported more than 64,000 fraud cases linked to travel, vacations, and timeshares in 2025. That figure is expected to climb in 2026 as scammers use AI tools to create convincing fake listings, phishing emails, and entire fraudulent booking platforms at a scale that was not possible just a few years ago.
A UK survey conducted by Opinium found that 70% of holidaymakers are now wary of promotional travel emails because they fear being scammed. More tellingly, half of all travelers surveyed said they now prefer booking through companies that clearly explain how they protect customers from fraud. For merchants, that last finding should be ringing loud and clear.
What the Scammers Are Running
The FTC’s summer warning highlights several categories of fraud that travel businesses need to be aware of:
- Fake travel websites: These cloned booking platforms look nearly identical to legitimate services, capturing payment details without ever creating a real reservation. They frequently appear in search results and paid advertisements.
- Fraudulent charter flights: Scammers advertise cut-rate airfare through fake travel agencies and social media channels. Travelers arrive at the airport to find no reservation exists.
- Bogus toll texts: The FTC has also flagged a rise in短信 phishing, or smishing, targeting travelers with fake toll payment demands or flight delay notifications.
- AI-generated listings: With generative AI, scammers can now produce convincing property photos, descriptions, and fake reviews for accommodations that do not exist, advertised at prices too good to be true.
The WhatsApp Hotel Scam: A Case Study in Sophistication
One of the most concerning trends identified by Bitdefender researchers is a WhatsApp phishing campaign targeting travelers in more than 10 countries.
What makes these attacks especially convincing is that some messages include genuine booking details: the guest’s name, hotel name, check-in dates, and reservation number. This data likely comes from legitimate breaches at third-party booking services, giving scammers a head start on building trust before they ever make a financial request.
Bitdefender advises travelers who receive unexpected WhatsApp messages about a booking to never click payment links, to contact the hotel directly using the phone number on its official website, and to log in to their booking account directly rather than through any link in a message.
What This Means for Travel Merchants
The surge in travel fraud creates direct operational risks for merchants and operators. Chargebacks from scammed customers who paid through a legitimate platform and received nothing can be substantial. Customer service teams spend hours investigating fraudulent transactions. And perhaps most damaging, the reputational spillover from an industry-wide fraud problem can suppress booking volumes even for merchants who have done nothing wrong.
There are practical steps that travel businesses can take to protect both their customers and their bottom line:
- Communicate security clearly: Travelers who are already anxious about scams are looking for reassurance. Clearly publishing your fraud protection practices, secure booking processes, and customer support channels can differentiate your platform and build trust at a moment when trust is scarce.
- Educate your customers proactively: Send booking confirmations that include explicit guidance on how your company will and will not contact them. Remind customers that you will never ask for payment via wire transfer, gift card, or cryptocurrency. Share your official communication channels.
- Monitor for impersonation: Keep an eye on domains and social media accounts that may be cloning your brand. Report fraudulent sites through the appropriate channels, including the FTC at ReportFraud.ftc.gov.
- Use secure payment infrastructure: Ensure your payment processor supports 3D Secure, tokenization, and real-time fraud scoring. The marginal cost of these tools is almost always less than the cost of a chargeback cycle.
- Log and act on breach indicators: If you receive reports that customers are receiving unsolicited messages citing real booking data, treat that as a signal that a third-party data breach may have exposed your customers’ information. Investigate, notify affected customers, and escalate as appropriate.
The Bottom Line
The FTC’s warning and the surge in travel fraud statistics are not abstract concerns. For travel merchants, they represent a measurable threat to revenue, reputation, and customer relationships. The businesses that respond by being transparent about their security practices, proactive in customer education, and diligent in their own payment infrastructure will be the ones that convert nervous travelers into loyal bookings.
The scammers are scaling up. Your defenses should scale up too.
