As cyber crime continues to evolve, CyberScotland Partnership is calling on individuals, families and businesses across Scotland to think ahead, stay alert and keep it secure this summer.
Our seasonal Secure Summer campaign: Think Ahead this summer. Keep it secure highlights the most common online activities targeting people during the warmer months – including fake holiday listings, travel related investment fraud (holiday lets) phishing emails disguised as booking confirmations and bogus ticket sellers for festivals, concerts and events.
Cyber criminals are quick to exploit holiday excitement and seasonal habits. Whether they are targeting your social media activity, mimicking travel agencies, luring people with deals that don’t add up, or selling tickets to events that never materialise, the risks are real. By staying informed and taking simple precautions, you can enjoy a more secure summer.
Throughout the coming months, we’ll be sharing practical advice and protective tips to help you and your community stay secure online this summer.
Deals that don’t add up
Criminals prey on dreams of sun-soaked getaways with enticing offers of timeshares or holiday club memberships that often turn out to be worthless. These can involve high-pressure sales tactics, false promises of resale value or hidden fees. Always research the company, check official websites, read the fine print and avoid rushed decisions.
Top tip: If you’re asked to pay upfront for something that sounds too good to be true, it probably is.
Sun, sea – check before you book
That luxury villa at a bargain price may not exist. Fake holiday rental listings, especially those found on social media platforms or unverified websites, are a growing problem. Criminals post photos of real properties and stunning views, take your money, then both they and the listing disappear.
Top tip: Book only through trusted travel agents or well-reviewed platforms. Always check reviews and look for secure payment options.
Don’t lose money chasing tickets
Summer means festivals, concerts and major sporting events – and wherever demand is high, online crime follows. Fake ticket sellers and cloned listings are common on social media and secondary sites, often pressuring buyers to act fast or pay by bank transfer. Once payment is made, the listing vanishes. Only buy from official and trusted ticketing platforms and authorised resellers, and always use a secure payment method.
Top tip: Look out for sellers who cannot provide official confirmation or a receipt. If a ticket is being sold before it has officially gone on sale anywhere, it is a fake.
Book a break, not a mistake
Another common threat is emails that appear to come from legitimate travel companies, asking for payment, login credentials or booking confirmations and using unsafe links. These phishing emails can lead to stolen data or financial loss. Always check the sender and go directly to the supplier.
Top tip: Never click links or download attachments from unexpected emails. Go directly to the official website to verify bookings.
Post the memories. Not the plans.
Sharing holiday plans online – whether a pre-trip countdown or live updates while away can make your home a target for burglars and alert them to your absence. It may also increase your risk of identity theft if too much personal detail is shared publicly. Opportunistic criminals monitor social media, and open privacy settings mean posts can reach far beyond your intended audience. The risk is easy to overlook when sharing feels instinctive, but the fix is simple: wait until you’re home before you post.
Top tip: Keep location tags and dates off your public posts and take a moment to review your privacy settings before you travel. Ideally, post memories after you have returned home.
Report cyber crime. Protect others.
If you or someone you know has been a victim of cyber crime, report it to Police Scotland by calling 101, or contact the National Cyber Security Centre. The more we share, the more we can protect one another.
Let’s work together to make Scotland cyber-resilient this summer.
Additional Resources / For Further Reading:
The following websites include additional advice and links to other trusted resources where you can find out more:
Police Scotland – internet safety
Advice on a wide range of online threats and general internet safety and ticketing crime:
https://www.scotland.police.uk/advice/internet-safety
https://www.scotland.police.uk/advice/scams-and-frauds/ticket-scams
Lead Scotland
Guidance on social media adverts for fake holidays
National Cyber Security Centre (NCSC)
Guidance on staying secure online, including phishing and protecting your accounts:
https://www.ncsc.gov.uk/cyberaware/home
Citizens Advice
Guidance on safely buying tickets online
https://www.citizensadvice.org.uk/consumer/event-tickets/buying-event-tickets-safely-online
Money Saving Expert
Five holiday booking activities to look out for – https://www.moneysavingexpert.com/news/2025/05/holiday-booking-scams/
Case study on a victim of a holiday crime – https://www.moneysavingexpert.com/team-blog/2024/08/holiday-scam-booking-dot-com/
Trading Standards Scotland
How to spot online crime and how to respond – https://www.tsscot.co.uk/holiday-scams/
https://www.tsscot.co.uk/wp-content/uploads/2024/03/Spotlight-Holiday.pdf