Threats on the Move: Exploring The World of OTA Scams

This report describes a surge of travel-industry scams observed in December 2024 — nearly 5,300 newly registered domains impersonating OTAs and hospitality brands — using tactics such as phishing pages, fake property listings, refund scams routed to crypto wallets, typosquatting/DGA-generated domains, helpdesk impersonation, and promotion of unconventional payment methods; the activity targets consumers and leverages scalable, evasive infrastructure to harvest personal and financial data.