{"id":227853,"date":"2026-03-20T09:46:39","date_gmt":"2026-03-20T16:46:39","guid":{"rendered":"https:\/\/www.mcafee.com\/blogs\/?p=227853"},"modified":"2026-03-27T12:30:48","modified_gmt":"2026-03-27T19:30:48","slug":"this-week-in-scams-travel-booking-betting-ai-malware","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/security-news\/this-week-in-scams-travel-booking-betting-ai-malware\/","title":{"rendered":"This Week in Scams: Why That \u201cBooking Confirmation\u201d Message Might Be Fake"},"content":{"rendered":"

Today marks the start of\u00a0Spring\u00a0in the Northern Hemisphere, and with warmer weather setting in summer trips are\u00a0vacation planning are\u00a0starting to take shape.\u00a0\u00a0<\/span>\u00a0<\/span><\/p>\n

But before you respond to that message about your hotel booking or payment confirmation,\u00a0it\u2019s\u00a0worth asking: is it\u00a0actually legit?<\/span>\u00a0<\/span><\/p>\n

This week in\u00a0scams,\u00a0we\u2019re\u00a0breaking down a\u00a0travel phishing scheme making the rounds through realistic booking messages, as well as new McAfee research on betting\u00a0scams\u00a0and AI-driven malware.<\/span>\u00a0<\/span><\/p>\n

We\u2019ll\u00a0walk through what happened, what to watch for, and\u00a0<\/span><\/b>how McAfee\u2019s tools can help you stay safe.<\/span><\/b><\/a>\u00a0<\/span><\/p>\n

Scammers Who Know Your Exact Travel Reservation Details<\/span>\u00a0<\/span><\/h2>\n

A new phishing campaign targeting\u00a0travelers\u00a0is exploiting hotel booking platforms like Booking.com, and\u00a0it\u2019s\u00a0convincing enough to fool even cautious users.<\/span>\u00a0<\/span><\/p>\n

According to\u00a0reporting from\u00a0<\/span>ITBrew<\/span><\/a>\u00a0and\u00a0<\/span>Cybernews,<\/span><\/a>\u00a0attackers are running a multi-stage\u00a0scam:<\/span>\u00a0<\/span><\/p>\n

How The Booking Scam Works<\/span>\u00a0<\/span><\/h3>\n\n\n\n\n\n\n\n
Scam Stage<\/span><\/b>\u00a0<\/span><\/td>\nHow It Works<\/span><\/b>\u00a0<\/span><\/td>\nWhat\u00a0You\u2019ll\u00a0Notice<\/span><\/b>\u00a0<\/span><\/td>\nHow to Protect Yourself<\/span><\/b>\u00a0<\/span><\/td>\nWhere McAfee Helps<\/span><\/b>\u00a0<\/span><\/td>\n<\/tr>\n
Stage 1: Hotel account gets compromised<\/span><\/b>\u00a0<\/span><\/td>\nAttackers phish or hack hotel staff to access booking platforms and guest reservation data.<\/span>\u00a0<\/span><\/td>\nYou\u00a0won\u2019t\u00a0see this part \u2014 it happens behind the scenes.<\/span>\u00a0<\/span><\/td>\nUse strong, unique passwords and enable multi-factor authentication on your own accounts to reduce risk of similar breaches.<\/span>\u00a0<\/span><\/td>\nIdentity Monitoring can alert you if your personal information appears in suspicious places or data leaks.<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
Stage 2: You receive a realistic message<\/span><\/b>\u00a0<\/span><\/td>\nScammers use stolen booking data to send messages via WhatsApp, email, or even booking platforms.<\/span>\u00a0<\/span><\/td>\nThe message includes your real name, hotel, and travel dates, making it feel legitimate.<\/span>\u00a0<\/span><\/td>\nBe cautious of unexpected outreach, even if the details are correct.\u00a0Don\u2019t\u00a0assume accuracy means authenticity.<\/span>\u00a0<\/span><\/td>\nScam\u00a0detection tools can help flag suspicious messages and\u00a0identify\u00a0potential phishing attempts.<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
Stage 3: Urgency is introduced<\/span><\/b>\u00a0<\/span><\/td>\nThe message claims\u00a0there\u2019s\u00a0an issue with your reservation and pushes you to act quickly.<\/span>\u00a0<\/span><\/td>\nPhrases like \u201cconfirm within 12 hours\u201d or \u201crisk cancellation\u201d create pressure.<\/span>\u00a0<\/span><\/td>\nPause before acting. Legitimate companies rarely\u00a0require\u00a0urgent payment changes without prior notice.<\/span>\u00a0<\/span><\/td>\nScam\u00a0detection can help\u00a0identify\u00a0high-risk messages designed to pressure you into quick decisions.<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
Stage 4:\u00a0You\u2019re\u00a0sent to a fake payment page<\/span><\/b>\u00a0<\/span><\/td>\nA link leads to a convincing lookalike site designed to steal your payment details.<\/span>\u00a0<\/span><\/td>\nThe page looks real but may have subtle URL differences or unusual formatting.<\/span>\u00a0<\/span><\/td>\nAlways navigate directly to the official website or app instead of clicking links in messages.<\/span>\u00a0<\/span><\/td>\nSafe Browsing tools can help block risky or known malicious websites before you enter sensitive information.<\/span>\u00a0<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

March Madness\u00a0Brackets, Bets, and Bad Actors<\/span>\u00a0<\/span><\/h2>\n

March Madness brings brackets, bets, and a flood of bad actors.<\/span>\u00a0<\/span><\/p>\n

New McAfee research<\/span><\/a>\u00a0found that\u00a0<\/span>1 in 3 Americans (32%) say\u00a0they\u2019ve\u00a0experienced a betting or gambling\u00a0scam<\/span><\/b>, and\u00a0nearly a\u00a0quarter (24%) say\u00a0they\u2019ve\u00a0lost money to one. On average, victims reported losing\u00a0<\/span>$547<\/span><\/b>.<\/span>\u00a0<\/span><\/p>\n

That\u2019s\u00a0not surprising when you look at the environment around the tournament. More than half of Americans are watching, more than half are\u00a0participating\u00a0in some form of betting, and\u00a0<\/span>82% say\u00a0they\u2019ve\u00a0seen betting promotions in the past year<\/span><\/b>.<\/span>\u00a0<\/span><\/p>\n

Some of the most common setups this season include:<\/span>\u00a0<\/span><\/p>\n