The short answer
Business travellers are targeted because they are busy, carry valuable devices, use unfamiliar networks and often act on urgent messages. The rule is simple: if a message is urgent, secret, threatening or asks you to pay in an unusual way, stop and check using a channel you already trust, not the contact details in the message. Never pay or share a code under pressure. Report suspicious messages to your employer's IT or security team.
Common scams aimed at business travellers
- Fake visa or immigration agents. Someone promises approval for a fee, or asks you to pay into a personal account. No one can guarantee a visa.
- Phishing booking and hotel messages. A message about a "problem with your booking" links to a lookalike site to collect card details.
- Urgent payment or invoice requests. An email that appears to come from a manager or supplier asks for an immediate transfer or a change to bank details.
- Fake Wi-Fi and charging points. An open network with a plausible name, or a public USB charger, is used to capture data.
- Taxi and arrivals-hall touts. Unsolicited offers, unlicensed cars or inflated fares.
- Fake fines or customs fees. A call or text says you owe a payment to avoid a problem.
- Fake invitations and conference organisers. A sponsorship or registration fee for an event that does not exist.
What to do instead
- Do not click or reply. Go to the company's or authority's official website yourself.
- Use a second channel. Phone a manager or supplier on a number you already have before you change bank details or pay.
- Confirm bookings in the app or account you created, not through a link.
- Use your own mobile data for sensitive tasks, or a trusted VPN, instead of open Wi-Fi.
- Use your own charger and power bank.
- Turn on multi-factor authentication and never share codes.
If you have been caught out
Contact your bank at once to try to stop a payment, tell your employer's security team, change passwords from a clean device and keep evidence such as messages and screenshots. Report it to the authorities.
Checklist
- To do: Employer's security and reporting contacts saved offline
- To do: Multi-factor authentication switched on for work and banking
- To do: Devices updated before you travel
- To do: Official bookings confirmed in the app or account, not via links
- To do: A rule agreed for payment changes: always confirm on a second channel
- To do: Own charger and power bank packed
- To do: Taxi pre-booked with a licensed operator
- To do: Reporting routes known for your home and destination countries
Common mistakes
- Trusting caller ID or a familiar logo. Both can be faked.
- Acting on a message from a "boss" without checking. This is a common fraud.
- Joining the first Wi-Fi that works. Confirm the name with the venue.
- Paying an agent who guarantees a result. It is a red flag.
- Not reporting. Quick reports help to limit damage.
Things that change
Scams change constantly and reporting channels are updated. Use each authority's current page.
Verify before you act
In India, report cyber fraud on the National Cyber Crime Reporting Portal. For examples of official advice, see the UK NCSC guidance on phishing scams, the Canadian Anti-Fraud Centre and the German BSI for consumers.