Vacation rental phishing scams catch more travelers

Shauna Kattler thought she’d found the ideal rental home in Playa del Carmen, Mexico, for her Christmas vacation: a two-bedroom penthouse condominium with a hot tub and an impossibly perfect view of the Caribbean.

And she was getting it for the impossibly low peak-season rate of $450 a night through, a popular vacation rental Web site. “Impossibly” being the operative word.

Shortly after Kattler, a relocation specialist from Kirkland, Wash., wired the money to Mexico, she discovered that she’d paid the wrong person. Her vacation dollars didn’t go to the property owner, but to someone who had stolen the owner’s e-mail password and assumed his identity through a crime called phishing.

Sound familiar? It should.

This past fall, I reported about new phishing problems on HomeAway and another site it owns, I introduced you to Tania Rieben, who lost $4,300 at the slippery fingers of a scam artist posing as a vacation rental owner in Maui.

Since then, I’ve heard from many more phishing victims who wired money to shady characters pretending to hold the keys to a HomeAway vacation rental. And I’ve heard from HomeAway, which says it’s taking steps to prevent future phishing attacks and help the customers who have lost money. More on its efforts in a second.

Let’s get back to Kattler. She tried calling the property, but the person who answered hung up on her repeatedly. Finally, she contacted HomeAway, which reviewed her e-mail correspondence and confirmed her suspicions: She’d been scammed.

“This is not a case of fraudulent activity on the site, but is a case of the owner’s e-mail account being compromised,” the company added. “ takes all fraudulent activities seriously, but our responsibility cannot extend to actions on private e-mail accounts.”

Kattler is understandably frustrated. She says HomeAway should refund the $4,500 she spent for 10 nights that she’ll never use. After all, the crime happened because of one of its listings. “All they can say is ‘I’m sorry,’ ” she says. “HomeAway is not taking any responsibility for the lack of security on their Web site.”

Actually, HomeAway is doing more than apologizing, but it isn’t taking full responsibility for the incidents, either. That’s because the company insists that the crimes aren’t being committed through its Web site. In response to cases such as Kattler’s, it recently expanded its optional Carefree Rental Guarantee to cover phishing losses.

It’s also working with its current phishing victims — there are 18, it says — to negotiate a resolution between the property owner and the guest.

HomeAway suspends a rental’s listing after a phishing incident until the security breach is plugged, which means that the property owner gets a new e-mail address. “In most of the cases, we do come up with a solution that makes everyone happy,” says Carl Shepherd, the co-founder of HomeAway.

Last month, HomeAway also warned the 625,000 property owners and managers with listings on the site about the phishing threat and offered them advice on how to protect themselves. It’s encouraging its owners to use an optional new system called Reservation Manager that offers “bank-level” security for bookings made online.

Shepherd says customers could easily prevent phishing incidents by calling the property to verify that they’re e-mailing the correct person. Criminals haven’t figured out a way of spoofing a phone number — at least not yet.

To that advice, I would add the following: Never wire money. Every phishing incident I’ve tried to mediate — every last one — starts with someone reluctantly sending money to a stranger. Once it’s gone, there’s no getting it back. With a credit card, at least you’re protected and can dispute a bogus charge.

The phishing problem isn’t unique to HomeAway. Other vacation rental customers have also recently been targeted. But HomeAway’s guests seem to be the most vocal. Many of them contacted me to ask for help after the first column I wrote about phishing. The company reports that some of these disputes have already been resolved.

But not all of them. Kattler’s grievance is still under investigation. She flew to Mexico as scheduled and paid another $2,000 for accommodations.

And Rieben’s case may never be solved. The real property manager in Maui says that he warned Rieben that he was the only point of contact for the rental but that Rieben tried to find the owner and then stumbled into a trap, according to HomeAway.

Although the property has offered her alternative dates for a stay in Maui, no agreement has been reached.

“We feel horrible for her,” Shepherd says.

So do I.

(Photo: gradwellsears/Flickr)

Share this story
Share on Twitter Share on LinkedIn Share on Facebook

Underwritten by

This site is underwritten by Sodexo North America

Sodexo North America Sodexo North America is part of a global, Fortune 500 company with a presence in 80 countries. Sodexo is a leading provider of integrated food, facilities management and other services that enhance organizational performance, contribute to local communities and improve quality of life for millions of customers in corporate, education, healthcare, senior living, sports and leisure, government and other environments daily. Learn more at

This site is underwritten by Travelex Insurance Services

Travelex Insurance Services is a leading travel insurance provider in the United States with over 55 years combined industry expertise of helping people dream, explore and travel with confidence. We offer comprehensive travel insurance plans with optional upgrades allowing travelers to customize the plans to fit their needs. Compare plans, get a quote and buy online at

This site is underwritten by AirHelp

AirHelp is the world’s leading flight delays compensation company, helping passengers apply for compensation following a delayed or canceled flight or when boarding has been denied. It is AirHelp’s mission to fight for passenger rights by holding airlines accountable for flights disruptions that are out of passengers’ control. AirHelp has already helped 5 million people, taking the stress out of applying for compensation and making it as hassle-free as possible for travelers around the world.

This site is underwritten by Allianz Travel Insurance

The Allianz Travel Insurance company has built its reputation on partnering with agents all around the world to provide comprehensive travel insurance for their clients. Contact Allianz Travel Insurance for a comprehensive list of coverage.

This site is underwritten by Chubb

Chubb is the world’s largest publicly traded property and casualty insurance company, and recognized as the premier provider of insurance for successful individuals and families in the U.S. and selected international markets, offering coverage for high-value automobile, homeowners, recreational marine/aviation, valuables and umbrella liability coverage. As an underwriting company, Chubb assesses, assumes and manages risk with insight and discipline, and combines the precision of craftsmanship with decades of experience to conceive, craft and deliver the best insurance coverage and services to individuals, families and business of all size.

This site is underwritten by Enterprise Holdings

A family-owned, world-class portfolio of brands. A global network that spans across more than 85 countries. Some 97,000 dedicated team members sharing common values. And more than 1.9 million vehicles taking our customers wherever they need to go.

This site is underwritten by Fareportal

Fareportal’s portfolio of brands, which include  CheapOair and  OneTravel, are dedicated to helping customers enjoy their trip. Whether you want to call, click, or use one of our travel apps, one thing is clear: We make it easy to take it easy.

This site is underwritten by

An independent provider of low cost CDW/LDW insurance for use with rental cars. Up to $100,000 cover with no deductible. Policies available on a per day, per trip or per year basis. Also works with overseas rentals. Try  Insuremyrentalcar.comnow.

This site is underwritten by InsureMyTrip

It’s simple. InsureMyTrip finds you the right travel insurance plan, every time. InsureMyTrip is the authority on travel insurance. Rated A+ for travel insurance by the Better Business Bureau. All travelers that purchase a policy through  InsureMyTrip have access to Anytime Advocates® for claims assistance.

This site is underwritten by Mediacom Communications

The nation’s fifth-largest cable operator, serving the smaller cities and towns in the Midwest and Southern regions of the United States. We are a high-performance broadband, entertainment, and communications company that brings the power of modern technology and quality customer experience to life inside the connected home by combining ultra-fast gigabit speeds with personalized local and over-the-top entertainment choices that fit your lifestyle. Details at

This site is underwritten by SCOTTeVEST

An innovative apparel brand for people who want easy access to everything they need. For those who live for every second, SCOTTeVEST lets you maximize your life. Ditch the carry-on bag and pick up a  SCOTTeVEST.

This site is underwritten by Virtuoso

The leading global network for luxury and experiential travel. This invitation-only organization comprises over 1,000 travel agency locations with 17,500 advisors in over 45 countries, and holds preferred relationships with 1,700 of the world’s finest travel companies. Virtuoso advisors collaborate with their clients to create personalized itineraries featuring exclusive perks, while also providing advice, access, advocacy, and accountability. For more information, visit

This site is underwritten by VisitorsCoverage

As a company that is constantly striving to simplify travel insurance, VisitorsCoverage, is on a mission to help travelers make the better decisions about purchasing travel insurance, quickly. VisitorsCoverage has helped millions of travelers globally to buy the suitable travel insurance and explore the world with confidence. Get insurance for your next trip at  VisitorsCoverage. Lowest Price Guaranteed.

This site is underwritten by MedjetAssist

Medjet is the premier global air-medical transport, travel security and crisis response membership program for travelers. With a MedjetAssist membership, if you become hospitalized more than 150 miles from home, we will get you from that unfamiliar hospital all the way home to the hospital you trust. All you ever pay is your membership fee. MedjetHorizon members add 24/7 personal security and crisis response benefits. readers enjoy discounted rates. Travel safer with  MedjetAssist.

This site is underwritten by Southwest Airlines

The mission of Southwest Airlines is dedication to the highest quality of Customer Service delivered with a sense of warmth, friendliness, individual pride, and Company Spirit. We are committed to provide our Employees a stable work environment with equal opportunity for learning and personal growth.

This site is underwritten by Sungard Availability Services

Leveraging more than 35 years of experience, Sungard AS designs, builds and runs critical IT services that help businesses manage complex IT, adapt quickly and build resiliency and availability. A leading provider of critical production and recovery services, Sungard AS partners with customers across the globe, delivering resilient IT systems, infrastructure and recovery services tailored to achieving desired business outcomes.

This site is underwritten by makes it fast and easy to compare and buy travel insurance online from top rated providers. Our unbiased comparison engine allows travelers to read reviews, compare pricing and benefits and buy the right policy with a price guarantee, every time. Compare and buy travel insurance now at

This site is underwritten by Squaremouth

Squaremouth helps travelers easily and instantly compare travel insurance policies from all major providers. Only companies that meet the strict requirements of Squaremouth’s Zero Complaint Guarantee are available on the website. Compare policies on to save over 70 percent on your next purchase.

This site is underwritten by Travel Leaders Group

Travel Leaders Group is transforming travel through its progressive approach toward each unique travel experience. Travel Leaders Group assists millions of travelers through its leisure, business and network travel operations under a variety of diversified divisions and brands including All Aboard Travel, Andrew Harper Travel, Colletts Travel, Corporate Travel Services, CruCon Cruise Outlet, Cruise Specialists, Nexion, Protravel International,, Travel Leaders Corporate, Travel Leaders Network and Tzell Travel Group, and its merger with ALTOUR. With more than 7,000 agency locations and 52,000 travel advisors, Travel Leaders Group ranks as one of the industry’s largest retail travel agency companies.

This site is underwritten by Travelers United

If you’ve been mistreated by the airlines, Travelers United is your voice in Washington. Join the #1 travel advocacy organization working with Congress to improve and protect travelers. Plus, get $400 of annual benefits you can use for travel for only $29/year. Add your voice to ours. Make travel better.  Join today.