Warning: Five holiday booking scams to watch out for as £12 million a year lost to travel fraud

Figures from the national fraud reporting centre Action Fraud show that over £12 million was lost to holiday booking scams last year, with July and August seeing the most scams reported.

Below we've listed five common holiday booking scams and how you can protect yourself from them. For more help avoiding scams, see our 30+ ways to stop scams guide.

1. Discounted flight tickets for sale on social media – book directly with the airline instead

Flight tickets are the most common fake item sold relating to holidays, according to recent data from Lloyds Bank.

You're most likely to encounter this type of scam on social media, where fraudsters will post fake ads for cheap flights or pretend to sell tickets that they can no longer use themselves. They will offer a low price and ask for a fee to change the name on the ticket – but once you send the money, they'll disappear along with your cash.

How to protect yourself

• Don't get drawn in by eye-catching ads and offers on social media. It can be impossible to know if the user or what they’re selling is legitimate – ask yourself if it's really worth the risk.

• Book directly with the airline. That way you can be sure your ticket is genuine.

2. Fake accommodation deals – if it sounds too good to be true, it probably is

Picture it:

• You're browsing social media when you come across a post offering a gorgeous luxury villa to rent – and due to a recent cancellation, it's 25% off. All you need to do to secure it is pay a deposit using a reputable money transfer service...

• You've found a listing for a charming cottage on a popular holiday booking website. It looks like the perfect home away from home – and it's much cheaper than other properties in the area. The host asks if you wouldn't mind paying them directly by bank transfer as it's cheaper for them that way – they'll even give you a discount...

• You're looking for a glamping break online but all the spots you've checked are fully booked for the summer. Then you come across an advert on social media showing last-minute availability. You click through and everything looks as expected, so you go ahead and book. You're reassured when a confirmation email pops into your inbox minutes later...

Sadly, these are all examples of accommodation scams – which are among the most common types of holiday fraud, according to travel industry body ABTA. Criminals set up convincing fake websites, hack into legitimate accounts and post scam ads on social media, all in an attempt to steal your cash. In the worst cases, you may turn up only to find the accommodation you booked isn't available – or doesn't exist.

How to protect yourself:

• Pay on plastic. If you're asked to make a bank transfer or use a currency transfer service, such as MoneyGram or Western Union, this is likely to be a scam – and you've very little protection if something goes wrong. In contrast, paying on a debit or credit card gives you chargeback or Section 75 protection.

• Check for feedback. Don't just rely on the firm's website. If the company is unfamiliar, search online for reviews and feedback.

• Scrutinise the company's contact details. Is there an address and a working phone number? Can you easily get through to customer services? Are they responsive? Is there an online chat? A lack of working contact details could indicate a scam.

3. Clone holiday booking websites – don't click links in emails and texts

Fraudsters can duplicate legitimate websites – sometimes down to the smallest detail. They can then use these to steal your money or harvest your personal information or payment details.

The following examples were shared by cyber security firm Trend Micro:

Fake Airbnb website

Fake Booking.com website

Screenshots courtesy of Trend Micro.

To be clear, these clone websites are fakes set up by criminals and have nothing to do with the legitimate Airbnb and Booking.com. 

How to protect yourself:

• Check the website address. For example the official Airbnb website is www.airbnb.co.uk and the official Booking.com site is www.booking.com – but the fake Airbnb website above was at Airbnb[.]ld83528[.]ru, while the Booking.com fake was at SecurePropertyCheck[.]com (we've inserted square brackets into the URLs to try to prevent them from being picked up as working links).

• Don't click links in emails or texts. If in doubt, go directly to the website by typing in the website address yourself.

4. Bogus cancellation refunds – guard your personal details 

Having a flight or hotel booking cancelled is stressful enough – and worse still, scammers can often jump on these moments as an opportunity to defraud you.

There are a number of ways this can happen, as highlighted by banking trade body UK Finance's Take Five To Stop Fraud campaign:

• Fake customer service accounts on social media. Criminals can create fake social media accounts imitating those of real firms or organisations, claiming to be able to help with refunds or claims. But the real goal is to get you to share your details in a private message or through a fake website.

  A recent investigation by consumer group Which? discovered examples of bogus Twitter/X accounts impersonating every major airline in the UK – and found these fake accounts were often quicker to respond than the real airline profiles. 

• Fraudulent emails that look like they're from the travel company. The emails may invite you to claim a refund but link to a fake website used to steal your personal and financial information. They may use official branding to try to convince you they're genuine.

• Spoofed calls from 'refund agents'. The caller may claim to be able to offer an instant refund if you give them your bank details. You may even be asked to make an upfront payment as an administration or handling fee.

How to protect yourself:

• Don't let yourself be rushed or pressured. Scammers may try to create a false sense of urgency in their attempts to trick you – be cautious of this. If in doubt, don't proceed.

• Make sure you're dealing with the real firm before sharing ANY info. If unsure, stop and go directly to the firm's official website (don't click links in emails or texts) – look at the website address to make sure. You can then find its social media profiles and contact numbers.

5. Sham giveaways – beware social media posts and any unsolicited contact

Scrolling through social media and spotted a post offering an unmissable deal or giveaway? Or got a promotional email, text, or WhatsApp message out of the blue? Be very careful – it could be a scam.

The exact form of this type of scam can vary a lot, as scammers will tailor their messaging around specific brands, holidays or events – for example, British Airways, EasyJet, Emirates and Ryanair have all been targets. 

How to protect yourself:

• Check the brand's official website. Is there any mention of the deal or discount? If not, it's likely to be a scam. If in doubt at all, contact the firm directly and ask.

• Be extremely wary of ANY unsolicited contact. Even if it looks authentic and uses the right branding, it's likely to be a scam.

• Look closely at links and website addresses. Have they been shortened or otherwise obscured, concealing their true destination? That's a telltale sign of a scam.

Think you've been scammed? Here's what to do

If you have any suspicions that you might be getting caught up in a scam:

• End all communication immediately. This includes where you get a call from someone claiming to be from your bank.

• Independently search for your bank's contact details to inform them. For example, call the phone number on the back of your card or on your bank statement). Or, for speed and ease, call the 159 hotline.

• If you have already been scammed and have lost money, contact your bank (again, by independently searching for its contact details). It is helpful to report the scam via Action Fraud to help the police investigate and prevent future scams from taking place.

• For more help and support, visit the Citizens Advice website, or call its consumer helpline on 0808 223 1133.

You can also see our 30+ ways to stop scams guide.

Here's how you can report a wide variety of scams quickly

The National Cyber Security Centre (NCSC) sets out a number of different ways to report scams depending on the type:

• Emailed scams. If you get a dodgy looking email, you can report it to the NCSC by forwarding it to report@phishing.gov.uk. Remember not to click on any links within these emails.

• Text scams. If you get a suspicious text message, you can forward it to the number 7726 – this will allow your provider to track the origin of the text and arrange to block or ban the sender if it's a scam. You can also report scam text messages to report@phishing.gov.uk – remember to provide a screenshot of the text message.

• Website scams. If you notice a website or URL that doesn't look quite right, you can easily report the web page to the NCSC directly via its online form.

• Scam adverts, including ads on newspaper websites, paid-for search engine ads, or ads appearing on social media. These can currently be reported to the Advertising Standards Authority through its online form.