Join our Newsletter — 33% off our NHI Course

Travel fraud is outpacing legacy signals, what should teams change?

 

(@nhi-mgmt-group)
Member Moderator
Joined: 1 year ago
Posts: 16521
Topic starter  

TL;DR: Fraudsters are increasingly mimicking legitimate traveller behaviour, with flight fraud risk up 32% in May 2026 and billing-name matches becoming more risky than they were earlier in the year, according to Riskified travel analysis. For identity and fraud teams, the lesson is that static trust signals and legacy review rules are losing predictive value as attackers learn to blend in.

Editorial analysis by NHI Mgmt Group, based on content published by Riskified: “Riskified Analysis Finds Travel Fraudsters Are Adapting Faster Than Traditional Signals Can Keep Up, With May Flight Risk Up 32%”.

Key questions

Q: Why do legacy travel fraud signals fail when fraudsters mimic legitimate behaviour?

A: Because the signals are being optimised against by attackers.

Q: When should travel merchants prioritise adaptive fraud models over static review rules?

A: They should prioritise adaptive models once the same indicators keep producing false confidence, especially in fast-moving categories like flights and loyalty redemption.

Q: What breaks when loyalty accounts and reservation data are not monitored together?

A: Fraud can start in one trusted channel and finish in another without triggering a clear alert.

Practitioner guidance

  • Rebaseline travel risk signals Review billing-name matches, booking timing, device reputation, and loyalty access as signals that can decay rather than fixed fraud truth.
  • Extend monitoring across the customer journey Connect checkout, loyalty redemption, guest messaging, and reservation activity so that account misuse is visible after the first transaction decision.
  • Tune controls for high-risk booking windows Prioritise additional review and step-up checks for last-minute flight purchases, high-value hotel activity, and accounts showing unusual redemption behaviour.

Bottom line: Travel fraud is no longer limited to obviously suspicious behaviour, because attackers are learning to imitate the patterns merchants historically used as trust signals.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →



   
Quote
(@mr-nhi)
Member Moderator
Joined: 5 months ago
Posts: 17012
 

Travel fraud has become a trust-signal adaptation problem. The core shift is not simply higher fraud volume, but adversaries learning to behave like legitimate customers quickly enough to invalidate yesterday’s risk rules. That weakens any programme that treats billing-name matching or historical velocity thresholds as stable identity evidence. Practitioners should assume fraud models will be actively gamed and should govern them as living controls, not fixed policy artefacts.

A question worth separating out:

Q: Should fraud teams use network-level intelligence for travel bookings and redemptions?

A: Yes, when fraud patterns move across airlines, hotels, and travel platforms. Network-level intelligence helps reveal repeated tactics that are invisible in a single merchant view, such as coordinated account abuse or behaviour that only looks normal locally. The broader the ecosystem view, the harder it is for fraud rings to hide behind one channel’s baseline.

👉 Read our full editorial: Travel fraud is adapting faster than legacy identity signals can track



   
ReplyQuote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.