Key takeaways:

  • Vacation scams are on the rise in Canada, affecting nearly a third of Canadian travelers.
  • Cyber criminals can exploit online tools and artificial intelligence (AI) like ChatGPT to steal your money or personal information.
  • You can help protect yourself by knowing how to spot common travel scams like bogus booking sites, fake vacation rental sites, unsecured Wi-Fi networks and more.
  • Help protect your money and data by booking through reputable travel sites, researching and cross-referencing before you book, and avoiding payments via cryptocurrency, wire transfers or gift cards.

You've saved up and you are ready to finally get away, discover new places, and make lasting memories. But dealing with vacation scams isn't on anyone’s bucket list. 

Travel scams have always been around. But instead of worrying about pickpockets and bait-and-switch schemes, you may now encounter a cybercriminal before you even board your plane. Online accommodations engine Booking.com reported an up to 900% increase in fraud, noting that the numbers jumped following the introduction of ChatGPT.1 Another travel company, Flight Centre Canada, reported in a 2024 survey that 32% of Canadians reported an incident — and nearly half were Gen Z travellers.2

We’ll walk you through the most common travel scams and how to spot them before you book your next dream vacation.

Common online vacation scams

Designed to dupe you while you’re making reservations for flights, accommodations, tours or packages, these vacation scams take place online — sometimes with the help of AI bots.

Detecting scams can be difficult, especially with the rise of AI. Here are some common online vacation scams to look out for.

Phishing

In the fast-moving environment of scamming, phishing is an old school strategy. With phishing, criminals send you an email to trick you into sharing personal details that they can then use to steal your money or identity. In one phishing travel scam, the fraudster sends an unsolicited email claiming you’ve won a free vacation. The only catch? You have to click a link or pay a small deposit to collect your “prize.”

How to spot phishing

Phishing often works for two reasons: you’re excited or you’re not paying attention. If something seems too good to be true, it’s best to slow down and take another look.

Some signs of phishing emails are:

  • Urgent or threating language
  • Unknown sender, incorrect sender email address or unexpected email
  • Requests for private and sensitive information, including credit card information
  • Spelling or grammar mistakes
  • Attachments or links

Never click on links or open attachments from unknown senders.

Spoofed websites

spoofed website is a fake website that looks and functions like a legitimate site. Vacation scammers use spoofed websites and sponsored ads to mimic legitimate booking platforms and appear at the top of search results, so you think you’re on an official platform. Only when you enter your information and credit card details, it doesn’t buy you a ticket — it sends your data to criminals.

How to spot a spoofed website

Fraudsters often use discount ads, especially on social media, to attract travellers to the fake sites. The best way to make sure you’re on the right site is to go there directly by typing in the URL in the search bar yourself.

Some signs of spoofed websites are:

  • A slightly off URL when comparing to the official site
  • Logos or colours that don’t look quite right, or unprofessional design
  • Spelling or grammar mistakes

Off-platform payment requests

Scammers can also show up on legitimate booking sites. If someone offers you a price reduction in exchange for sending payment directly, they might be trying to scam you.3

It might seem like this could save you money but you won't be able to make a claim if someone defrauds you. If you’re dealing with a scammer, they’ll disappear after taking your money.

How to spot when an off-platform payment request is likely a scam

Your best bet is to always use a legitimate booking site to ensure you have a record of your transaction and protection in case anything goes wrong. But always be suspicious of off-platform payment requests involving:

Non-existent rentals

In this con, scammers post fake images and write-ups for rentals on third-party booking platforms. When you arrive, the rental doesn’t exist. Sometimes, criminals use AI to write the listings,2 along with bogus reviews, making it hard to spot a fake ad. If you ask questions, a chatbot might respond — and you may end up having an entire conversation with an AI.

How to spot a non-existent vacation rental

Sometimes, it’s not easy to discern write-ups for fake rentals from real ones. But be skeptical of rental listings with:

  • No customer reviews or reviews that are too positive
  • The same images or copy as other ads

It’s always good practice to use trusted sites and search reviews before making a booking. If you’re unsure about a listing, use Google Street View to double-check the address.

In-person travel scams to be aware of

Here are some of the most common in-person scams to watch out for, once you’re on vacation.

Taxi scams

If you get into a cab and the taxi driver says the meter is broken, it’s likely a scam. The idea is to get you off the clock so they can overcharge you for the fare.

How to spot a taxi scam

Don’t be duped by a non-existent or “broken” meter. When you get in a cab, always make sure there’s an active meter present and that the standard minimum fare is on the display.

When possible, use official taxi stands rather than flagging cabs from the street. Remember, if something seems off, get out of the cab.

Credit card skimming

Credit card skimming happens when criminals attach a device (“skimmer”) to a credit card reader that copies and stores your information, and they might look entirely legitimate. Skimmers can be on any card reader, including in a store, at an automatic banking machine (ABM), at a gas station or in a taxi.

How to spot a credit card skimmer

When travelling (or at home), you should pay attention to every terminal you use. Before you swipe your credit or debit card, look for:

  • Anything that seems off
  • Cracked or loose card readers
  • A keypad that seems looser or more raised than normal

Monitor your bank activity when travelling and ensure you’ve activated InfoAlerts and are monitoring for Fraud Alerts. Even if you’re out of the country, you can lock down your account.

Fake Wi-Fi

Hackers sometimes set up unsecured public Wi-Fi networks in popular tourist spots to intercept your data.

How to spot fake Wi-Fi

Open Wi-Fi networks can be tempting to join, but it’s best to avoid unsecured networks. Avoid hotspots in the same location with similar names — these might be “evil twins” set up by scammers.4

Check with your phone provider before you go on vacation to ensure your plan covers your data needs or consider buying a digital SIM card for your trip.

Pickpocketing

Often, pickpockets distract you by bumping into you, asking you a question or even playing the “friendly local” by offering to help you — for example, noting your shoe is untied. During the interaction, they (or an accomplice) steal your valuables. 

How to spot a pickpocket

Be aware of your surroundings, especially of people coming into your personal space, and:

  • Divide your valuables up so you’re not carrying them all in the same place
  • Avoid keeping valuables or your wallet in easy-to-access pockets or compartments
  • Use a cross-body bag rather than a clutch or shoulder handbag

Shakedowns

A shakedown refers to extortion and often impacts tourists in various ways. One way is when someone poses as a police officer, asking for a bribe. In another scam, a person might offer to show you around for free and then demand a “tip” after.

How to spot a shakedown

If something seems off, follow your gut. If you’re approached by an “official”:

  • Ask to see their badge and credentials
  • Offer to accompany them to the police station

For everyone else, including volunteer tour guides, politely but firmly turn down their offer.

Traveller best practices

Follow these best practices to help avoid travel scams:

  • Do your research before you travel and don’t be pressured by time-sensitive deals
  • Use trusted sites and agencies for bookings
  • If you book on your own, double-check that the site is legitimate before you enter your personal information. When possible, use a credit card for booking
  • Protect your data and use a VPN, avoid public Wi-Fi networks and bring your own travel tools like a phone charger and a SIM card
  • Be aware of your surroundings, use common sense and trust your instincts

How to report a travel scam

Reporting fraud and scams is crucial. It can help recover your money, protect your identity or prevent others from being scammed. Follow these steps if you fall for a scam:

  • Contact your bank and other relevant financial institutions to let them know. If you bank with Scotia, report fraud at 1-866-625-0561
  • Inform the credit bureaus to put a fraud alert on your account so lenders know to call you if anyone tries to get credit on your account
  • File a report with the local police and with the Canadian Anti-Fraud Centre. You can either report online or by phone

The bottom line — travel scams are on the rise

Just like delayed flights or poor weather, tourist scams can put a damper on your travels. Take steps before you go to protect yourself, so your dream vacation doesn’t turn into a nightmare.

Learn how to protect yourself from scams today