Cybercriminals are targeting Russian holidaymakers during the late-summer travel period with fake discount tour packages and fraudulent housing offers, a cybersecurity executive has warned.
Luka Safonov, business partner for innovative development at cybersecurity firm Garda, detailed the emerging threat in an interview with news publication Lenta.ru on August 17, 2026. He warned that the period covering late summer and early autumn provides ideal conditions for fraudsters because travel demand remains strong while tourists search for bargain deals and make hasty booking decisions.
Safonov explained that travellers frequently book trips using mobile phones while away from home, leaving them less likely to verify website URLs or check the payment details of recipients. Scammers build their attacks around these attractive prices, tight time constraints, and reduced victim vigilance.
According to Safonov, one of the most widespread schemes involves fake websites created to mirror legitimate airlines, hotels, tour operators, and booking aggregators. In addition, cybercriminals post fraudulent rental listings for non-existent properties and demand that victims transfer advance payments directly to personal bank cards.
Safonov added that victims who fall for initial listings often face further extortion. Scammers frequently contact buyers after a booking to demand extra payments for luggage or urgent visa processing fees.
Key Warning Signs for Travellers
To help consumers identify fraudulent offers, Safonov listed several key indicators that should immediately raise suspicion during the booking process:
- Prices that are noticeably below standard market rates.
- Pressure to complete payment within just a few minutes.
- Errors or discrepancies in the website domain name.
- Absence of formal service contracts or verified legal company details.
- Requests to transfer funds to an unknown individual via card number or the System of Fast Payments (SBP).
Cybersecurity Landscape
The warning comes amid broader security concerns regarding digital fraud in 2026. Previously, cybercrime experts identified deepfake technology as the single most dangerous scam technique of 2026, highlighting how malicious actors increasingly adapt sophisticated digital tools to target consumers.
The late-summer travel period, traditionally known in Russia as the velvet season, sees millions of vacationers head to southern resorts and international destinations as summer temperatures soften into early autumn. Garda, a Russian cybersecurity enterprise focused on threat detection and data protection, frequently monitors seasonal spikes in online fraud targeting consumer transactions.
