Scammers are targeting travelers with fake rentals and sites. Are you sure your next vacation booking is safe?

Four years ago, Joel Kramer thought he’d secured the perfect Rhode Island beach house for his family vacation. When the property manager from “Golden Vacation” sent him a Vrbo listing, he paid half the US$4,000 (C$5,500) rental fee up front.

But the day before they were supposed to check in, reality hit.

“I emailed, no response. I emailed again, no response. We called and got a Verizon response saying ‘this number is no longer active,’” Kramer told The Washington Post (1).

The Kramers had been scammed — and they’re far from alone. The Federal Trade Commission (FTC) received nearly 10,000 fraud reports in Q2 2025 and thieves took US$40 million (C$55.3 million) — US$5 million (C$6.9 million) more than the prior year (2).

And Canadians are just as easily subjected to scams like this. Fraud and financial scams are a major growing problem across Canada — including travel and other parts of daily life.

In 2024, the Canadian Anti-Fraud Centre (CAFC) received more than 108,000 fraud and scam incident reports resulting in losses totalling more than $638 million. And most experts believe the true total could be much higher due to underreporting (3).

Cybercriminals are becoming increasingly sophisticated, using tactics that even savvy travellers might miss. From fake booking sites and rental scams to impersonating and phishing fraud, scammers are finding new ways to trick people into sending money or personal information.

Be on the alert for these common scam tactics.

Scam #1: Phony rental listing

Fake vacation rentals are one of the most common travel scams. Scammers often copy real online rental listings — including professional photos and detailed descriptions — and repost them as their own. In some cases, the property doesn’t even exist.

These scams can be hard to spot at first, but there are warning signs to watch for. Common red flags include:

• The same property appears on multiple sites, but has little to no guest review history
• The listing contains spelling mistakes, awkward wording, incorrect grammar, or low-quality or stock photos
• The “owner” asks you to communicate or pay outside the booking platform
• The person claims to live outside Canada and can’t meet or speak to you directly
• You’re pressured to act quickly, or asked to pay using methods with limited consumer protection, such as e-transfers, wire transfers, prepaid cards or money-transfer services, instead of a credit card

Legitimate rental platforms usually keep all communication and payments within their system to protect both renters and hosts. If someone pushes you to move the conversation off-platform, or to pay in a way that can’t be reversed, that’s a strong sign something is off.

Take an extra few minutes to double-check a listing you’re interested in — it could save you thousands of dollars and help ensure your vacation doesn’t turn into an expensive disappointment.

Sponsored

Smart investing starts here

Build your own investment portfolio with CIBC Investor’s Edge online and mobile trading platform. Enjoy low commissions on trades and special pricing for active traders, students and young investors.

Get started today

Scam #2: Fake travel website

Some scammers create fake travel websites that closely copy well-known booking platforms. These sites can look almost identical to the real thing — same layout, colours, logos and even similar web address. Sometimes the only difference is a small change in the site’s URL.

When you enter payment details on one of these fake sites, you’re not actually booking a flight or hotel. Instead, you’re directly handing over your credit card information to cyber criminals, who may access it while you’re still on that site — without actually booking anything for you.

Here are some indications you’re on a fake site:

• The website address has small changes, such as extra words, hyphens or spelling errors
• The deal looks far cheaper than what you see on official airline or hotel sites
• The page is missing basic security features, like “https” at the beginning of the URL, or a padlock icon in the browser bar
• You’re pushed to enter payments details without clear booking confirmation

To stay safe, double-check the web address before you book and consider typing it in yourself instead of clicking links from ads or emails. A few extra seconds of caution can protect your money and your personal information.

Scam #3: Social media-based hotel hoax

Sharing vacation photos on social media may seem harmless, but scammers mine these posts and use them to target travellers in real time.

Using advanced tools — including artificial intelligence (AI) technology — fraudsters can sometimes figure out where you’re staying based on the details in your photos. These include building design, pool layouts, restaurant interiors or branded signage. They don’t need geotags or location settings to find you.

Once they believe they’ve identified your hotel, scammers send messages that appear to come from the hotel’s front desk or management team. The message typically claims there’s a billing issue — for example, a failed credit card authorization, or an extra charge that needs approval.

The goal in these messages is to create urgency around resolving the “problem.” While the message might include links to the real hotel website, the phone number or reply option connects you directly to the scammers, who ask you for your payment details.

Watch for these warning signs:

• Unexpected billing messages after you’re checked in
• Requests to resolve payment issues by phone or text, rather than at the front desk
• Pressure to act immediately
• Requests for payment using wire transfer, gift cards, e-transfers or payment apps

If there’s ever a legit billing issue, hotels will discuss it with you in-person at the front desk. When in doubt, don’t click links or call numbers sent in messages — go to the front desk and speak directly to staff to clarify and resolve any issue.

Avoid posting real-time vacation photos — wait until you’ve checked out or returned home to share your memories to keep yourself safe.

Sponsored

Take control of your money with Monarch

Simplify your finances with Monarch, the all-in-one app designed to help you budget, track spending, and hit your goals faster. For a limited time, get 50% off your first year with code WISE50.

Start your free trial today

Scam #4: “Urgent” messages

Scammers often rely on creating panic or urgency to get results. One common tactic is sending messages that demand immediate attention, before you have time to think

For example, you might receive a message claiming a problem with your flight or hotel reservation that needs to be fixed right away. The goal is to make you react quickly — typically, by clicking a link or calling a number — before you stop to question whether the message is real.

Once you respond, you could end up on a fake website or speaking directly to a scammer who asks for your credit card details or personal info.

Be extra cautious if a message includes:

• A text from a company you don’t remember signing up with
• A frantic, or threatening tone that pressures you to act immediately
• Links or phone numbers you haven’t verified
• Claims that your reservation, benefits or account will be cancelled if you don’t respond right away

Legitimate companies usually don’t demand immediate action by text. If you’re unsure, don’t reply or click anything — instead, contact the company directly using the phone number or website you know is real.

Scam #5: False CAPTCHA

Even regular website actions can be used to trick travellers. In a fake CAPTCHA scam, a pop-up claims to verify that “you’re not a robot.” But instead of protecting the site, it can expose your device to malware.

These scams often appear on fake or compromised websites. You might be prompted to complete unusual “verification steps” that go beyond clicking a checkbox and selecting images. Following through on these instructions can give scammers access to your computer, allowing them to steal passwords, banking details or other personal information.

Red flags to watch for include:

• CAPTCHA requests that appear outside normal login or checkout pages
• Prompts asking you to perform manual actions on your keyboard or device
• Verification steps that feel unrelated to booking, singing in or paying
• Pop-ups that rush you or warn something bad will happen is you fault to comply

Legitimate CAPTCHA tests are simple and stay within the website itself. If you’re asked to do anything unusual, close the page and don’t continue. When in doubt, stick to well-known booking sites and avoid clicking links from ads or unsolicited messages.

The coming wave: deepfakes and voice cloning

The scams already covered are bad enough, but there’s an even more advanced threat on the rise: deepfakes and AI-driven impersonation. These are scams that use AI to create fake voices, audio or video that appear real and trustworthy.

Scammers and cyber criminals are increasingly using this technology to trick people. Canadian authorities have warned that AI-generated voice messages and calls pretending to be officials, or even people close to you, are becoming more common.

Criminals will use synthetic voices to resemble a person familiar to you to steal personal information or money. The Canadian Centre for Cyber Security and the CAFC are tracking these malicious campaigns and cautioning Canadians about these voice-cloning impersonation scams (4).

Deepfake technology uses convincing video or audio scams to make them more convincing and personal. Scammers may impersonate bank agents, government officials and even friends and family members to create a sense of urgency to pressure you into giving up sensitive data or making a payment.

Financial losses from scamming incidents continue to climb in Canada. According to the Competition Bureau Canada, consumers have lost more than $2 billion due to scamming since 2021 — again, with only a fraction of incidents actually reported (5).

These trends make it more crucial than ever to stay alert. Fraudsters are using increasingly sophisticated techniques that are completely fake to make connections with unsuspecting victims. The best defence is to slow down, verify contacts separately and never act on pressure or urgency alone when money or personal information is at stake.

How to protect your finances before you travel

A little preparation before your trip can go a long way in protecting your money.

Start by using a credit card or debit card instead of e-transfers or wire transfers. If your card details are compromised, your cash doesn’t just vanish — and many credit cards offer fraud and chargeback rights that can help you recover unauthorized charges.

Next, turn on real-time purchase alerts through your bank’s app. These notifications let you know right away if a charge is made, so you can act quickly if it’s something you don’t recognize. You can also ask your card issuer about temporary spending limits or travel controls, which may reduce the risk of fraud while you’re away.

Be cautious about paying for accommodations up front. Avoid paying in full unless the booking is verified, refundable and made through a reliable platform. Finally, keep digital copies of your travel confirmation, receipts and messages with hosts or hotels. If a dispute arises, having clear records on hand can help easily resolve issues.

A few small steps before leaving can help ensure your trip is memorable for the right reasons — not because of a fraud headache.

How to recover if you get scammed

If you think you’ve been scammed, act right away. Contact your bank or credit card company as soon as you notice something wrong. The faster you report it, the better your chances of stopping further fraudulent transactions and recovering your stolen money.

Next, report the incidents to the Canadian Anti-Fraud Centre (CAFC). This is Canada’s national fraud reporting agency, and filing a report helps track scams and may support investigations. You can report online or by phone for free.

If money was taken or your identity was used, you may also need to contact your local police service — especially if your bank or insurer asks for a police report to proceed with a claim.

If the scam involves a booking platform such as Airbnb, Vrbo, Expedia or other travel site, report it to the company immediately. Many platforms offer purchase protection or dispute processes if you booked and paid through their official website.

Finally, collect and save all related records, including emails, texts, screenshots, booking confirmations and transaction details. Having clear documentation will make it easier to dispute charges, file reports and protect yourself if issues come up later.

The best defence is a good offence

Recovering from a scam can be stressful, but taking quick, organized action can limit the damage and help you move forward. Travel scams are becoming more common — and more convincing — especially as fraudsters use social media, fake websites and AI tools to target travellers.

The best defence is a good offence: Prepare, slow down, verify bookings, use protected payment methods and question anything that creates a sense of urgency. If something goes wrong, acting quickly and reporting it can limit the damage and help protect others from the same scam.

—With files from Melanie Huddart

Article sources

We rely only on vetted sources and credible third-party reporting. For details, see our editorial ethics and guidelines.

Washington Post (1); Tableau Public (2); Government of Canada (3, (5); CAFC (4)