Travelers beware: Cybercrime is the top safety threat in 2025

Forget pickpockets and lost luggage. The biggest threat to your next vacation might be cybercrime. 

“Anyone can be a potential victim,” warns Seth Ruden, director of global advisory at BioCatch, a biometric company. “But frequent travelers are likely targets, as travel rewards, airline miles, and other stored payment details on travel accounts can be lucrative and easily monetizable.” 

People say they’re more worried about cybersecurity than ever. In fact, a recent study by Travelers Insurance found that 62 percent of respondents were worried about online safety — the highest level in 11 years. (Travelers polled business owners, but other surveys show their concerns are reflected more broadly.)

What are the cyber threats to travelers in 2025?

There are a range of threats from cybercrime facing travelers, from phishing scams designed to steal personal information to fake travel websites and rental listings that leave victims stranded and financially drained. Check Point Research, a cybersecurity firm, says in 2024, says 1 in every 33 newly registered vacation-related domains were malicious or suspicious. This category included phishing sites imitating Booking.com, Kayak, and other popular travel platforms, according to the company.

“Threat actors now have the capabilities to identify and target mobile devices, deliver malicious code to the device, access a device to track your location, activate your device’s microphone, and intercept messages,” says Frank Harrison, regional security director of the Americas at World Travel Protection. “Adopting cybersecurity measures that focus on risk mitigation is essential to protect travelers and their data.” (Related: Don’t let volcanoes, other irrational travel safety fears, ruin your summer vacation.)

Abhishek Karnik, the head of threat research at McAfee, says there are two places where travelers are particularly vulnerable: while they’re booking and while they’re traveling. 

“Travelers need to stay vigilant,” he says.

But how?

Want to avoid cybercrime? Practice good online hygiene

As technology continues to integrate deeper into our travel experiences, the risk of cyber-attacks while booking trips online or accessing unsecured networks in foreign countries is a real concern.

Peter Hamdy, managing director at Auckland & Beyond Tours, says you have to be on your guard in 2025. 

“From my extensive experience in the travel industry, I can tell you that one of the most significant dangers will likely be the evolving landscape of cybersecurity threats,” he says. (Related: Everyone hates tourists. Here’s how to be a better traveler next summer.)

So brush up on your online hygiene — which is to say, change your passwords frequently, enable two-factor authentication, don’t click on any phishy links and never, ever give your password or access codes to a third party. You can also use a travel insurance app to stay safe. 

Use a VPN

A virtual private network (VPN) can keep you safer, says Joe Cronin, CEO of International Citizens Insurance. 

“Travelers are always on the hunt for free Wi-Fi, but a lot of the public networks you might connect to are unsecured and put your personal data at risk,” he explains. “I always recommend that travelers use a VPN to secure their phones or laptops when using public Wi-Fi.”

Be careful who you trust to avoid cybercrime

One of the most common social engineering threats while traveling is the impersonation scam. Attackers may pose as hotel staff, tour guides, or even fellow travelers to gain access to personal information on your devices, according to Karink, the McAfee security expert. 

“Always verify the identity of individuals before sharing any sensitive information or handing over personal belongings,” he adds.

Watch for phishing

Phishing — sending emails mimicking a reputable company to induce you into giving up personal information — is becoming far more sophisticated. 

“Travel is a prime opportunity for a spoofing campaign,” warns Rishika Desai, a threat researcher at predictive security firm BforeAI. “Many are looking for a deal during a time when prices are especially high. And cyber criminals are impersonating well-known, legitimate brands.” (Related: This is the worst place to put your passport when you travel.)

The fix? Never, click on an email, and follow a link from a source you don’t recognize. Always go directly to the company’s site to verify any travel offer.

Beware of AI

Artificial intelligence has given cybercriminals the tools they need to pull a fast one on even the most sophisticated traveler.

“AI can build convincing websites, create more natural-sounding language, and even generate fake reviews,” says Cache Merrill,CEO of Zibtek, a software developer. “Everything seems far more legitimate with AI-driven technology, and people are falling for it.” (Here’s our best guide to staying safe when traveling.)

Although AI is making it even more challenging for travelers to discern legitimate offers from scams, artificial intelligence isn’t perfect. With a little practice you can discern AI-generated text, photos, videos — and bogus travel offers. Or you could just take a shortcut: If an online offer looks too good to be true, it probably is.

Do this one thing to protect yourself online

Perhaps the best advice is to leave nothing to chance. Unfortunately, travelers are just winging it, according to the latest research. Only about two in 10 business travelers say they are required to take a training course on how to improve cybersecurity, according to a recent poll by Opinium Research. 

“Do your research and make sure you have a plan in place for any potential problems that could arise,” says John Gobbels, chief operating officer of air medical transport and travel security program Medjet. “It’s always more stressful in the moment, and easier if you have systems or backup plans in place.” 

There’s also cybersecurity support, which protects travelers against unforeseen events. For example, BOXX Insurance and World Travel Protection recently launched cybersecurity assistance for business travelers that monitors emerging digital risks and helps them predict and prevent potential threats and scams. This type of support may soon be available to leisure travelers as well.

The golden rule of travel has always been to expect the unexpected. In 2025, that means anticipating and preparing for the growing threat of cybercrime. By doing that, you can ensure your adventures are defined by joyful discoveries — not digital disasters.