The world of travel is filled with excitement, adventure, and unfortunately, scams. The Consumer Protection’s WA ScamNet team has recently issued a warning about a sophisticated new scam that could turn your dream holiday into a nightmare. This scam is particularly concerning as it targets unsuspecting travellers through what appears to be legitimate communication from their accommodation providers.

The Scam: A Two-Pronged Attack

This elaborate scam begins with the scammer posing as a genuine customer and targeting a hotel. They may claim to need assistance with downloading 'important' information related to their upcoming stay. For instance, they might say they suffer from allergies to certain cleaning products and need the hotel to cross-reference the substances used. Alternatively, they could request a map they've created to be printed off for their technologically-challenged parents.

Regardless of the excuse, the endgame remains the same. Once the hotel employee downloads the malware-infected documents, the scammer gains full access to their sensitive information. This includes login credentials, financial details, and contact information for their other customers.

Beware of scammers! If in doubt, ask for help! Image: Freepik.

The second part of the scam involves the scammer sending a convincing message via a fake booking link to the hotel’s future guests, asking for additional credit card verification. The message appears to come from the hotel, making it seem legitimate and trustworthy.

The Dangers of Falling for the Scam

The sophistication of this scam is alarming, and even the most scam-savvy consumers could potentially fall victim to it. Handing over credit card details in response to these messages could lead to significant financial loss and a ruined holiday.

How to Protect Yourself

While this scam is indeed sophisticated, consumers can protect themselves by following WA ScamNet’s advice against malware and phishing. This includes:

• Avoid clicking on unexpected or unsolicited links, even from trusted businesses. Instead, contact the company directly at an official email address or phone number to confirm the message's authenticity. Do not rely on contact details provided in an unexpected message.
• Be suspicious of messages encouraging you to act quickly and never enter personal or banking details into any website unless you are certain it is genuine. Check the URL carefully for indicators of deception.
• If you have provided your financial information through a suspicious link or in response to an unexpected message, contact your financial institution immediately and follow their guidance on securing your finances.

Essentially, it's important to remember that if something seems too good to be true, it probably is. You should also be aware of the symptoms that a company or any website dealing with personal information has been compromised.

Key Takeaways

• Consumer Protection's WA ScamNet team has issued a warning about a sophisticated scam that targets travellers and accommodation providers.
• The scam begins with hackers posing as genuine customers who manipulate hotel employees into downloading malware-infected documents, which give scammers access to sensitive information.
• The scammers then send fake booking links to future guests of the hotel asking for additional credit card verification.
• People are advised to avoid clicking on unexpected links, to contact the company directly to confirm any requests, and to report any suspicious activity to their financial institution and WA ScamNet.

If you're a victim of this scam or any other suspicious website or online venture in general, it's always wise to call your local police or the Australian Cyber Security Centre with a hotline number 1300 CYBER1 (1300 292 371) to report the crime. You could also visit the National Anti-Scam Centre’s ScamWatch or the Australian Signals Directorate to reach for help. If you think your credit card details have been leaked, you should also contact your bank and be sure to check your accounts regularly for any unexpected activity or payments.

We also encourage our members to post about any scams they have come across on our Scam Watch forum. This way, our whole community can stay on top of the current scams circulating.

Finally, no matter how savvy you think you are when it comes to avoiding scams, never underestimate the skill and craftiness of scammers. Keep your guard up and be extra cautious, especially when it comes to travel and accommodation bookings! Always be vigilant, members! Let us know what you think in the comments below!

 

[BruceC]

Why would you engage with someone you don't know for three hours? If that doesn't raise a red flag, then nothing will. As for aged people not grasping new technology, if they don't understand it then they don't use it. If they use it then they should understand the implications of a scam!! By the way I am in my late seventies and have never been taken in by a scammer.

Thank you LynS: my point exactly!
I am 71 and have never been scammed and I won’t be!
And even if I did I wouldn’t be blaming the banks or anyone else as it will be the consequences of my own stupidit?

 

[marni]

We use an internet card - where we have limited funds - it will limit our losses if we are scammed. Also we have previously sent a "sample" payment to make sure the operator received our payment before any further payment is sent. Yes contacting by phone is always a good idea.

 

[BruceC]

Wow, the story is about an unknown person as an example and warning, not someone in this community. So instead of literally blasting readers here, why not excercise some civility and restraint if you must comment.

Fyi I had my bank account hacked, discovered it yesterday afternoon, and proceeded to take immediate action. I received the money back from my bank this morning for a fraudulent Afterpay repayment. It was a larger amount not consistent with ANY purchases I have made.

I check my bank statements etc and exercise due diligence weekly with anything financial. My days of being a forensic accountant stay with me!
Of course I notified the Bank, had Afterpay check it out also...and yes it was a fraudulent payment done to God knows where! My banks security is onto it, card cancelled etc. I did nothing wrong at all.

Different story!
You were “hacked” not “scammed”
You didn’t willingly hand over your details by clicking on an unknown link the handing over your details! Or did you??
In this instance the bank did the right thing.
But people who blindly hand their details to scammers deserve to lose everything.