Notifications
Clear all
Topic starter
11/07/2026 8:39 pm
TL;DR: Fraud rings are using fake online travel agencies, long lead times, device and connectivity combinations, and booking changes to bypass travel merchant controls, according to Riskified. The pattern shows that fraud prevention must account for adversarial adaptation, not just static rules, while customers using buy-for-you services often become victims too.
NHIMG editorial — based on content published by Riskified: an analysis of travel fraud trends in the latest Risk Rundown
Questions worth separating out
Q: What breaks when travel fraud controls focus only on checkout risk?
A: Checkout-only controls miss the later stages where fake OTA fraud is actually monetised.
Q: Why do fake travel agencies complicate fraud prevention and identity checks?
A: They separate the person making the booking from the person funding it and from the person who ultimately benefits.
Q: How do security teams spot book-and-switch fraud in travel flows?
A: Look for long-dated bookings, itinerary edits, and unusual device or network combinations that appear consistent only when viewed in isolation.
Practitioner guidance
- Correlate booking lifecycle events Track initial booking, date changes, ticketing, and refund activity as a single sequence so fraud teams can spot manipulation that only emerges after the first authorisation.
- Weight long lead-time bookings differently Apply separate review logic to distant departure dates because fraud rings use the gap between booking and travel to avoid reversal windows.
- Combine device and network reputation Score mismatched combinations such as desktop sessions over cellular networks alongside IP history, account age, and payment provenance rather than using each signal alone.
What's in the full article
Riskified's full analysis covers the operational detail this post intentionally leaves for the source:
- The specific travel-fraud patterns observed in the dark web OTA ecosystem and how they evolve over time
- Practical examples of booking behaviour that merchants can feed into fraud models and manual review queues
- A fuller roadmap for fraud prevention across travel merchants, loyalty programmes, and payment teams
- Operational guidance on using machine learning and broader data networks to separate good bookings from bad orders
👉 Read Riskified's analysis of travel fraud trends in the latest Risk Rundown →
Dark web travel fraud and buy-for-you OTAs: what merchants miss?
Explore further
11/07/2026 9:07 pm
Fraud in travel has become a signal-aware adversary problem, not a simple payment screening problem. The article shows that fraudsters are studying merchant detection logic and reshaping booking behaviour to sit just outside rule thresholds. That shifts the problem from static fraud rules to adaptive governance across payment, customer, and fulfilment signals. Practitioners should treat the booking flow as an adversarial environment, not a passive transaction record.
A question worth separating out:
Q: Who should own response when fake OTA fraud affects customers and merchants?
A: Responsibility should be shared across fraud operations, payments, customer support, and risk governance. Merchants need a process for disputed bookings, card-skimming indicators, and customer protection because fake OTA schemes can harm cardholders even when the merchant’s own controls were partially effective.
👉 Read our full editorial: Travel fraud is adapting to merchant signals in dark web OTAs
