Online Travel Scams to Avoid — Worldwide Warning Guide

Orlando is ranked Florida's most targeted city for online travel scams. Fraudulent websites mimic hotel, theme park, or vacation package booking sites. Tourists pay for reservations that do not exist or hand over payment data to scammers through paid search ads.

Fraudulent tour operators create professional-looking Facebook pages and Instagram accounts advertising Boracay island-hopping packages, cliff diving excursions, and parasailing at 30-50% below market rates. After collecting full payment via GCash or bank transfer, the operator either disappears entirely or arrives on the day with an unsafe, unlicensed boat and demands additional cash. The Malay-Boracay Tourism Office has issued multiple public warnings about this type of fraud, which spiked significantly in 2024-2025.

Fraudulent websites mimicking legitimate Arusha safari booking platforms collect deposits and full payments for Serengeti or Ngorongoro crater trips that never materialise. The sites use professional layouts, copied imagery from real operators, and fabricated TripAdvisor badge graphics. Victims receive automated confirmation emails and WhatsApp follow-ups to build confidence, then discover the company is untraceable once they arrive in Arusha. Losses typically range from $500 to $3,000 USD.

Fraudulent websites impersonating ticketing pages for the San Antonio Zoo, SeaWorld, and other attractions create near-identical domains and run social media ads offering discounted tickets. Victims pay, receive nothing, and cannot get refunds.

Dozens of unofficial websites mimic the official Uffizi ticketing portal (uffizi.it) using near-identical domain names and layouts — e.g. "uffizi-tickets.com", "book-uffizi.com" — charging €40–70 for tickets priced officially at €20–25. Some sites deliver real tickets sourced through third-party resellers at markup; others collect payment and send nothing. The fake sites rank in search results via paid ads above the official site.

Lebanon-based scammers operate long-running romance fraud schemes targeting foreigners through dating apps, Instagram, and WhatsApp, cultivating trust over weeks before requesting money for emergencies, medical bills, or travel to meet the victim. The U.S. State Department specifically flags internet romance and financial scams as prevalent in Lebanon. Victims are often asked to transfer funds via Western Union, wire transfer, or cryptocurrency to contacts in Beirut or other Lebanese cities. Some variants involve a fake Lebanese contact asking a prospective visitor to carry cash or packages into the country on their behalf.

Fraudulent landlords advertise apartments near Piața Unirii and the Old Town on Facebook Marketplace and local classified sites, requesting a security deposit of €100–300 to "hold" the unit before arrival. Once the transfer is made, the listing disappears and the host becomes unreachable. The properties often use stolen photos from legitimate listings on Airbnb or Booking.com.

Fraudulent luxury villa and apartment listings on third-party sites and social media target tourists searching for Mykonos accommodation outside of major booking platforms. Scammers use real photos scraped from legitimate properties, collect a large deposit or full payment via bank transfer, and then become unreachable. The property either does not exist or is not available for rent.