Introduction
As millions of Mexicans gear up for their Easter break, whether at the beach, exploring historical cities, or traveling internationally, cybercriminals ramp up digital scams, such as phishing and fake Wi-Fi networks, capitalizing on the surge in travel reservations.
According to a report by cybersecurity firm Kaspersky, digital fraud intensifies during the Easter season as increasingly sophisticated tactics are employed to steal personal and financial information.
What is Phishing?
One common method is phishing, where fraudsters create fake websites mimicking legitimate airline, hotel, or travel agency platforms. These deceptive portals, nearly identical in logos and design to the originals, trick users into entering their credentials or banking details.
Kaspersky’s Resaca Digital study reveals that 13% of Mexicans cannot identify a fake page, while 8% fail to verify if the URL is secure when making online purchases.
Dangerous Strategies to Watch Out For:
- Fake reservation forms requesting additional information, such as trip purpose or financial details.
- Urgency alerts warning of room shortages or expiring fares to pressure victims.
- Fake contests and promotions promising free flight tickets or exclusive discounts in exchange for completing surveys and sharing personal data.
24% of Mexicans admit providing their information for discounts, making them particularly vulnerable to these scams, according to the report.
Travelers aren’t the only targets; travel agencies and their employees are also frequent objectives. Criminals send fraudulent messages disguised as notifications to “manage properties” or update reservations, redirecting employees to fake pages where their credentials are stolen, granting attackers access to customer databases or enabling fraudulent transactions.
Public Wi-Fi
Apart from scams during booking, public Wi-Fi in airports, hotels, or cafes offers a convenient way to stay connected but also poses a significant risk.
Cybercriminals create fake networks with names similar to legitimate ones to intercept personal data, banking credentials, or access to social media.
A recent case in Australia exemplifies this danger: a criminal set up free Wi-Fi networks mimicking legitimate connections, redirecting users to fake pages where they had to enter their email addresses or social media credentials.
Once these data are obtained, attackers can access more sensitive information, such as private communications or financial details.
Expert Recommendations from Kaspersky:
- Always verify the URL: Before entering personal or financial data, ensure the web address is legitimate. Check for spelling errors or suspicious characters.
- Be wary of suspicious links: Avoid clicking on links sent via email, text messages, or social media, especially if they promote exclusive offers or prizes.
- Use secure payment methods: Prefer credit cards with fraud protection and avoid direct transfers to unknown accounts.
- Enable two-factor authentication: This extra layer of security makes it harder for unauthorized individuals to access your accounts.
- Caution with public Wi-Fi:
- Connect only when necessary.
- Verify the network’s legitimacy with staff.
- Avoid accessing banking platforms or sensitive services while connected.
- Use a VPN (Virtual Private Network) to encrypt your data and browse securely.
Key Questions and Answers
- Q: What is phishing? A: Phishing is a method where fraudsters create fake websites to trick users into entering their personal or financial information.
- Q: What are common phishing strategies? A: These include fake reservation forms, urgency alerts, and fake contests promising discounts in exchange for personal data.
- Q: Who are the targets of these scams? A: Travelers and travel agencies, including their employees, are frequent targets.
- Q: What risks do public Wi-Fi networks pose? A: Cybercriminals can intercept personal data, banking credentials, or access to social media through fake public Wi-Fi networks.
- Q: How can I protect myself from digital scams during Easter travel? A: Verify URLs, avoid suspicious links, use secure payment methods, enable two-factor authentication, and exercise caution with public Wi-Fi.
