common travel – From AI-powered vishing calls pretending to be American Express to fake vacation rentals, bogus customer service numbers, smishing toll texts, and “quishing” QR codes, scammers are targeting travelers with urgency designed to trigger instant payments. Here’s h
Summer travel is supposed to feel like getting your life back—flights booked, calendars cleared, the first hotel check-in email marked with a star.
Instead. more travelers are getting pulled into a different kind of trip: one where scammers try to steal their identity. their vacation dollars. and even hard-earned points. And this year, the pressure is coming faster. Advances in artificial intelligence are making fraud schemes more convincing, not less.
A consumer advocate and travel ombudsman described that their case files are filled with the aftermath of these scams—then walked readers through the most costly ones to watch this summer, how to spot them, and what to do if you’ve already been targeted.
AI voice phishing scams (vishing)
One call started with a detail that made it feel real: the caller ID showed American Express Security. When the call was answered. a female voice said the call was being recorded. used the traveler’s first and last name. and told them the matter was urgent. The voice claimed there were “legal issues” involving an “Amex Green Card.”.
That card wasn’t held—but the caller kept listening, saying they continued the call out of professional interest because they write about scams.
The voice didn’t sound completely robotic. Still, the AI-generated voice had a noticeable lag time and struggled to pronounce numbers. When it attempted to confirm the phone number, it stumbled, stopped, and restarted the conversation from the beginning.
The fake agent then tried to lock in credibility. “Miss Michelle, I am a real human being. I am Ms. Lee,” the voice said, insisting the number was legitimate: “Check your caller ID. I am calling from 1-800-528-4800, American Express Security. I’ll wait while you check the number. You’ll see I am telling the truth.”.
The scam kept escalating. “Ms. Lee” asked if the traveler was traveling because someone was using their card in multiple destinations around the world. The caller was told that the Department of Homeland Security was investigating them because “seven firearms” had been purchased with the card.
When the traveler didn’t react with panic, “Ms. Lee” told them they needed to understand the seriousness. The authorities could detain them at any time, the voice said. The solution came immediately: if the traveler sent copies of their passport. social security card. and credit card. the “documents” could be forwarded to Homeland Security to prove identity and stop the investigation—action needed quickly “before my arrest warrant was issued. ” the caller was warned.
The point of the story is less about whether anyone can believe such an extreme script. and more about how it works on real victims. The ombudsman said vishing scams are surprisingly successful and that AI-generated voices can be convincing even to people who might otherwise be cautious. The urgency and panic created by the bot are described as the mechanism that keeps victims off-kilter long enough for the scam to succeed.
They added that similar calls have been reported by victims who contacted them—claims that AI agents were representing cruise lines and airlines as well. Regardless of the company name used, the end goal is described as stealing personal information and cash.
How to spot and avoid vishing
– Don’t be fooled by the number on your caller ID. Scammers can make any number or identity appear on your phone. If you’re unsure whether your credit card company is calling. hang up and call the official number on the back of your card. – Vishing calls are designed to create panic and confusion. including claims that police are on the way. that the IRS is investigating you. or that your bank account is hacked—anything to push you into acting on the scammer’s instructions. – AI voice cloning is still imperfect. Unnatural pauses. unusual cadence. stumbling over common words. and then beginning all over are signs you may be speaking to an AI agent. – If you receive a suspicious call, hang up and call the official number for the company.
The ombudsman also listed email channels where phishing and vishing attempts can be reported, including spoof@AmericanExpress.com, abuse@bofa.com, internetsecurity@barclays.com, phishing@chase.com, spoof@citi.com, emailwatch@discover.com, reportphish@wellsfargo.com.
Bait-and-switch or ghost vacation rentals
Vacation rentals can be a lifeline for families and larger groups, especially when hotels feel too cramped. But scammers know that too.
The ombudsman said vacation rental scams have “danger lurking” on sites like Airbnb and Vrbo. The issue ranges from bait-and-switch schemes to nonexistent properties—listings created to lure travelers into expensive fraud.
A belief that many travelers share is that Airbnb and Vrbo vet all properties on their platforms. The warning here is direct: they don’t, and that misunderstanding helps scammers fly under the radar and capture more victims.
Before confirming a rental, the guidance includes:
– Read the reviews. Reviews tied to confirmed guest stays are described as more reliable than testimonials posted on random websites. A property with no reviews is flagged as a yellow indication. though the ombudsman cautioned it could also mean the property is new. – Examine the photos. In 2026, the ombudsman said nearly everyone has a high-quality camera in their phone. Legitimate hosts want to show their property. Fraudsters, they said, often don’t care
about the images and instead lure with unusually low rental prices. Low-quality, blurry, or grainy photos are described as one indicator the listing might be a scam. – Check with Google reverse image search. The instruction: take a screenshot of some images and run them through reverse image search. because scammers may lift photos from other listings. real estate sites. or even furniture ads. – Don’t book outside the platform. Bad actors want to take
victims off the platform, away from the security protections. Discounts and bonuses that move the transaction private are described as setting up payments via wire transfer. Zelle. or even cryptocurrency.
Bait-and-switch schemes work another way after a reservation is confirmed. The “host” then claims the property is unavailable due to flooding. maintenance issues. double-booking. or another emergency. and offers a replacement. The replacement is often described as rundown and unlike the luxury rental promised.
If the substitute isn’t comparable, the advice is to walk away and contact the listing platform immediately.
Fake customer service scams
One of the most expensive travel scams described right now can begin with something deceptively simple: searching on Google.
Travelers searching online for an airline, cruise line, or hotel customer service number are increasingly being directed to fake call centers run by scammers. By the time victims realize they aren’t speaking to legitimate representatives, thousands of dollars may already be gone.
The ombudsman says these scams take advantage of moments when travelers are stressed, stranded, or desperate for help—such as a canceled flight, denied boarding, or an urgent refund request. That’s when scammers can impersonate support and still appear “correct” to someone racing against time.
Red flags include:
– The phone number appears in a sponsored ad, a social media comment, or an online forum. – The agent claims there is an urgent problem with your reservations and pressures you to act immediately. – You’re asked to pay fees through Zelle, wire transfer, gift cards, or cryptocurrency. – The representative discourages you from hanging up and calling the company back directly. – Someone calls you with urgent news about your reservation—especially if you didn’t initiate the call.
The safest approach is described as straightforward: use the contact information published on the airline, cruise line, or hotel official website or mobile app.
Toll road text scams (smishing)
Smishing scams have exploded across the United States over the past year, and they start with a text message that claims you owe money for an unpaid toll.
The messages are built to look urgent and official. warning of late fees. suspended vehicle registrations. or other penalties if you don’t pay quickly. Sometimes they threaten that authorities will be coming to arrest you if payment isn’t received immediately. A link is usually included. and the ombudsman says it leads to a fake payment page designed to steal credit card information. banking details. and other personal data.
The reason the scam lands is practical: many travelers use toll roads while on vacation. After returning home, a text about an unpaid toll can feel believable.
Red flags listed include:
– The text creates a false sense of urgency and alarm. – The message comes from a strange phone number or email address and sometimes lands in spam. – The linked website looks suspicious or slightly misspelled. – The toll amount is small enough that victims may pay without questioning. – The punishment doesn’t fit the crime—no. the Department of Justice isn’t coming for you if you don’t pay a toll.
If you get a text claiming you owe unpaid tolls, the instruction is to not click the link and instead go to the official toll agency website or contact the rental car company if you were driving a rental vehicle. The ombudsman said scam attempts can be reported to the Federal Trade Commission.
Scammer-placed QR codes (quishing)
QR codes became popular during the pandemic for contactless menus, payments, and check-ins. Scammers quickly learned how to weaponize that habit.
Quishing scams involve fraudsters placing self-created QR codes over legitimate ones in airports, parking garages, tourist areas, and restaurants. When someone scans, they’re redirected to a fake payment page or malicious website meant to steal financial or personal information.
The NYC Department of Transportation recently issued a warning about scammers placing QR codes on parking meters in the city. Tourists who scan them are directed to an AI-created website that looks official, but isn’t. The scam is described as tricking victims into delivering their credit card information to criminals instead of paying for parking.
In other cases, the ombudsman said QR codes can direct users to websites that mirror the login pages of legitimate airlines, hotels, cruise lines, or other travel companies.
Protection guidance includes:
– Avoid scanning QR codes that appear tampered with, covered by stickers, or placed awkwardly over another code. – Before entering payment information, check the website address opened after scanning. Scammers purchase domains that closely resemble official websites, so examine the URL carefully. – When possible, use an official app or manually type the website address instead of scanning an unfamiliar QR code. – Be cautious about scanning QR codes posted in public places where anyone could have placed them.
Fake travel agents and “helpers” lurking in Facebook groups
Travel-focused Facebook groups can be useful places to swap advice, compare experiences, and ask questions. Scammers, the ombudsman warns, know it too.
Over the past few years. multiple cases were described where travelers believed they were speaking with legitimate travel agents. airline representatives. or helpful group members inside Facebook communities—only to find they were communicating with scammers posing as travel experts or customer service agents.
These fraudsters are said to monitor posts from frustrated travelers seeking refunds, canceled reservations, or urgent help. Within minutes, victims may receive a comment or direct message offering to “fix” the problem.
The scam often shifts the conversation from Facebook to WhatsApp, Telegram, or private text messages. Victims are then instructed to send small payments via Zelle. Wise. wire transfer. or cryptocurrency for tickets. refunds. or “processing fees.” Once the money is sent. it’s gone. the ombudsman said.
Cruise-related Facebook groups are described as especially attractive targets because travelers often post detailed information about upcoming trips. booking problems. and refund disputes. Fake airline customer service agents are also described as appearing in comments beneath posts from stranded or frustrated passengers.
The advice is blunt:
– Anyone can join most Facebook groups and create an official-looking profile. – A company logo or travel-themed profile picture doesn’t prove someone works for an airline, cruise line, or travel agency. – Scammers often pressure victims to continue conversations privately through direct messages. – Requests for payment through Zelle, cryptocurrency, gift cards, or wire transfer are major red flags. – If you need help with a travel problem. contact the airline. cruise line. hotel. or booking platform directly through its official website or app—not through a stranger in a Facebook group offering assistance.
Where things stand—and what to do next
The message is that scammers are aiming for travelers before, during, and after trips. The risk, the ombudsman emphasized, doesn’t end the moment you get home.
And if you’ve already been targeted, they say you can email ombudsman@thepointsguy.com with your request for assistance so they can review the details of your travel “fiasco” and help if possible.
travel scams vishing AI voice phishing vacation rental scams Airbnb Vrbo fake customer service numbers smishing toll scams quishing QR codes Facebook travel scams identity theft