News

Travel Warning: Cybercrime Emerges As A Top Security Threat In 2025

  • Cyber threats are a growing concern for travelers as scammers use phishing, fake travel sites, and mobile hacks to steal personal and financial data.

  • Good cybersecurity habits can reduce risks by changing passwords, using two-factor authentication, and a VPN to protect travelers online.

  • BOXX is enhancing cybersecurity support for travelers with a new service that helps business travelers monitor risks and prevent scams.

Forget pickpockets and lost luggage. The biggest threat to your next vacation might be lurking online.

“Anyone can be a potential victim,” warns Seth Ruden, director of global advisory at BioCatch, a biometric company. “But frequent travelers are likely targets, as travel rewards, airline miles, and other stored payment details on travel accounts can be lucrative and easily monetizable.”

People are worried about cybersecurity more than ever. In fact, a recent study by Travelers Insurance found that 62 percent of respondents were worried about online safety — the highest level in 11 years. (Travelers polled business owners, but other surveys show their concerns are reflected more broadly.)

What are the cyber threats to travelers in 2025?

There are a range of cyber threats facing travelers, from phishing scams designed to steal personal information to fake travel websites and rental listings that leave victims stranded and financially drained. Check Point Research, a cybersecurity firm, says in 2024, says 1 in every 33 newly registered vacation-related domains were malicious or suspicious. This category included phishing sites imitating Booking.com, Kayak, and other popular travel platforms, according to the company.

“Threat actors now have the capabilities to identify and target mobile devices, deliver malicious code to the device, access a device to track your location, activate your device’s microphone, and intercept messages,” says Frank Harrison, regional security director of the Americas at World Travel Protection. “Adopting cybersecurity measures that focus on risk mitigation is essential to protect travelers and their data.”

Abhishek Karnik, the head of threat research at McAfee, says there are two places where travelers are particularly vulnerable: while they’re booking and while they’re traveling.

“Travelers need to stay vigilant,” he says.

But how?

Practice good online hygiene

As technology continues to integrate deeper into our travel experiences, the risk of cyber-attacks while booking trips online or accessing unsecured networks in foreign countries is a real concern.

Peter Hamdy, managing director at Auckland & Beyond Tours, says you have to be on your guard in 2025.

“From my extensive experience in the travel industry, I can tell you that one of the most significant dangers will likely be the evolving landscape of cybersecurity threats,” he says.

So brush up on your online hygiene — which is to say, change your passwords frequently, enable two-factor authentication, don’t click on any phishy links and never, ever give your password or access codes to a third party. You can also use a travel insurance app to stay safe.

Use a VPN

A virtual private network (VPN) can keep you safer, says Joe Cronin, CEO of International Citizens Insurance.

“Travelers are always on the hunt for free Wi-Fi, but a lot of the public networks you might connect to are unsecured and put your personal data at risk,” he explains. “I always recommend that travelers use a VPN to secure their phones or laptops when using public Wi-Fi.”

Be careful who you trust

One of the most common social engineering threats while traveling is the impersonation scam. Attackers may pose as hotel staff, tour guides, or even fellow travelers to gain access to personal information on your devices, according to Karnik, the McAfee security expert.

“Always verify the identity of individuals before sharing any sensitive information or handing over personal belongings,” he adds.

Watch for phishing

Phishing — sending emails mimicking a reputable company to induce you into giving up personal information — is becoming far more sophisticated.

“Travel is a prime opportunity for a spoofing campaign,” warns Rishika Desai, a threat researcher at predictive security firm BforeAI. “Many are looking for a deal during a time when prices are especially high. And cyber criminals are impersonating well-known, legitimate brands.”

The fix? Never, click on an email, and follow a link from a source you don’t recognize. Always go directly to the company’s site to verify any travel offer.

Beware of AI

Artificial intelligence has given cybercriminals the tools they need to pull a fast one on even the most sophisticated traveler.

“AI can build convincing websites, create more natural-sounding language, and even generate fake reviews,” says Cache Merrill,CEO of Zibtek, a software developer. “Everything seems far more legitimate with AI-driven technology, and people are falling for it.”

Although AI is making it even more challenging for travelers to discern legitimate offers from scams, artificial intelligence isn’t perfect. With a little practice you can discern AI-generated text, photos, videos — and bogus travel offers. Or you could just take a shortcut: If an online offer looks too good to be true, it probably is.

Do this one thing to protect yourself online

Perhaps the best advice is to leave nothing to chance. Unfortunately, travelers are just winging it, according to the latest research. Only about two in 10 business travelers say they are required to take a training course on how to improve cybersecurity, according to a recent poll by Opinium Research.

“Do your research and make sure you have a plan in place for any potential problems that could arise,” says John Gobbels, chief operating officer of air medical transport and travel security program Medjet. “It’s always more stressful in the moment, and easier if you have systems or backup plans in place.”

About BOXX Insurance

BOXX Insurance Inc. helps businesses, individuals and families insure and defend against cyber threats. Privately-held with headquarters in Canada, BOXX has global offices in Toronto, Miami, Zurich, Dubai and Mumbai.  

BOXX Insurance is an award-winning global cyber protection and insurance provider. We're not a typical company. That's by design. We're serious about making the world a digitally safer place; creating real, positive changes for our clients and partners, and building a lasting legacy, from what we create, inside the BOXX.  

Every day we're improving the digital health of businesses, families and individuals around the world who rely on BOXX's solutions and services to predict, prevent and insure them against cyber threats. 

Media Contact:   

Sarah Madden, Growth Marketing & Communications Lead  
news@boxxinsurance.com 

Related Posts

News Remote, hybrid and in-office work: a leadership perspective

Remote, hybrid and in-office work: a leadership perspective

How hybrid and remote work models are transforming productivity, culture, and employee engagement in the post-Covid era, with insights from industry leaders like BOXX Insurance’s Neal Jardine.

14/01/2025
News New Cybersecurity Solution Protects Business Travellers from Growing Digital Threats

New Cybersecurity Solution Protects Business Travellers from Growing Digital Threats

BOXX Insurance and World Travel Protection Launch Cybersecurity Tool for Business Travellers

14/01/2025

Sign up for the BOXX Insurance Newsletter

Get the latest updates about Cyber Insurance and Protection with our newsletter.