PhishPin / Brands Live Phishing Data / Travel & transport
Travel & transport phishing: which brands are copied the most
39 travel & transport brands are tracked in PhishPin's index. Together they have 329 hostnames in phishing feeds and 142 newly registered lookalike domains from the last 15 days.
Ranking: most impersonated travel & transport
| # | Brand | Share of category hosts | Pressure | Hosts | Lookalikes |
|---|---|---|---|---|---|
| 1 | Airbnb | 49% | 55 · High | 162 | 12 |
| 2 | KLM | 16% | 49 · Elevated | 52 | 21 |
| 3 | Booking.com | 14% | 42 · Elevated | 46 | 7 |
| 4 | Delta Air Lines | 9% | 44 · Elevated | 29 | 20 |
| 5 | Hilton | 3% | 34 · Moderate | 11 | 12 |
| 6 | Hertz | 3% | 27 · Moderate | 10 | 3 |
| 7 | Agoda | 1% | 13 · Low | 4 | 0 |
| 8 | Tripadvisor | 1% | 18 · Moderate | 2 | 4 |
| 9 | JetBlue | 1% | 9 · Low | 2 | 0 |
| 10 | Avis | 0% | 24 · Moderate | 1 | 27 |
| 11 | Amtrak | 0% | 16 · Moderate | 1 | 6 |
| 12 | Expedia | 0% | 14 · Low | 1 | 4 |
| 13 | Grab | 0% | 12 · Low | 1 | 2 |
| 14 | Air India | 0% | 9 · Low | 1 | 1 |
| 15 | Cathay Pacific | 0% | 9 · Low | 1 | 1 |
| 16 | Marriott | 0% | 9 · Low | 1 | 1 |
| 17 | Air Canada | 0% | 5 · Low | 1 | 0 |
| 18 | IRCTC | 0% | 5 · Low | 1 | 0 |
| 19 | Trip.com | 0% | 5 · Low | 1 | 0 |
| 20 | United Airlines | 0% | 5 · Low | 1 | 0 |
| 21 | Qantas | 0% | 12 · Low | 0 | 8 |
| 22 | MakeMyTrip | 0% | 8 · Low | 0 | 3 |
| 23 | Etihad Airways | 0% | 6 · Low | 0 | 2 |
| 24 | Lufthansa | 0% | 6 · Low | 0 | 2 |
| 25 | Skyscanner | 0% | 6 · Low | 0 | 2 |
| 26 | Qatar Airways | 0% | 4 · Low | 0 | 1 |
| 27 | Ryanair | 0% | 4 · Low | 0 | 1 |
| 28 | Singapore Airlines | 0% | 4 · Low | 0 | 1 |
| 29 | easyJet | 0% | 4 · Low | 0 | 1 |
| 30 | Air France | 0% | 0 · Low | 0 | 0 |
| 31 | American Airlines | 0% | 0 · Low | 0 | 0 |
| 32 | British Airways | 0% | 0 · Low | 0 | 0 |
| 33 | Emirates (airline) | 0% | 0 · Low | 0 | 0 |
| 34 | Hyatt | 0% | 0 · Low | 0 | 0 |
| 35 | IndiGo | 0% | 0 · Low | 0 | 0 |
| 36 | Southwest Airlines | 0% | 0 · Low | 0 | 0 |
| 37 | Spirit Airlines | 0% | 0 · Low | 0 | 0 |
| 38 | Turkish Airlines | 0% | 0 · Low | 0 | 0 |
| 39 | Vrbo | 0% | 0 · Low | 0 | 0 |
Common lures against travel & transport
- A "your booking is cancelled" or "confirm your reservation" email with a payment link.
- A fake loyalty-points expiry or free-flight offer asking you to log in.
- A cloned hotel or airline site reached through a paid search ad.
- A fake host or guest message asking you to pay outside the platform.
Red flags
- Booking problems are handled inside the real app, not through an urgent email link.
- Payment is requested by bank transfer, gift card or a link outside the official site.
- The site looks right but the address bar shows a different domain.
If you already clicked or entered details
Check the booking in the official app, contact your card issuer if you paid, and change the account password and loyalty-programme login. Report the listing or message to the platform.
Is your travel brand being copied?
Attackers copy any brand whose customers log in or pay. Enter your domain for a free check of email-spoofing gaps, registered lookalikes and feed listings.
Talk to us about takedownsQuestions
Which travel & transport brands are impersonated the most?
Airbnb leads with 162 hostnames in phishing feeds, followed by KLM (52) as of 1 Nov 2026.
How can I spot phishing that targets travel & transport?
Booking problems are handled inside the real app, not through an urgent email link. Payment is requested by bank transfer, gift card or a link outside the official site. The site looks right but the address bar shows a different domain.
What should I do if I fall for a fake travel brand page?
Check the booking in the official app, contact your card issuer if you paid, and change the account password and loyalty-programme login. Report the listing or message to the platform.