As international tourism recovers
Cybercriminals are benefiting from a booming black marketplace for stolen journey paperwork, with a brand new investigation revealing that private data from thousands and thousands of travellers throughout the globe is being bought on the darkish internet for as little as $10.
Joint analysis by cybersecurity corporations NordVPN and Saily has uncovered a rising commerce on darkish internet marketplaces in scanned passports, visa stickers, airline loyalty accounts and resort reservations. The findings come at a time when international tourism is rebounding from the pandemic interval, making travellers extra weak to digital exploitation.
The investigation, carried out in June 2025, analysed listings throughout underground boards and darkish web pages. Researchers discovered that scanned international passports are extensively obtainable, with costs ranging between $10 and $200.
Verified passports from the European Union are among the many costliest, promoting for over $5,000. Fake visa stickers, fraudulent bank statements, and hacked frequent flyer accounts containing thousands and thousands of miles are additionally being traded, some for a whole lot of {dollars}.
Knowledge from the International Air Transport Association (IATA) reveals that international passenger site visitors has returned to close pre-pandemic ranges, with a 36.1 per cent improve recorded in 2024.
The Center East has performed a major function on this progress. Dubai Worldwide Airport remained the world’s busiest for worldwide passengers in 2024, dealing with practically 87 million travellers, whereas Doha and Riyadh noticed double-digit progress.
As extra individuals journey throughout borders, specialists say cybercriminals are exploiting a number of strategies to acquire private data. Malware can be utilized to extract information from telephones and laptops. Phishing assaults, usually disguised as official airline or visa service platforms, trick customers into importing passport scans. In some instances, attackers reap the benefits of poor safety settings on cloud storage to entry delicate paperwork.
Researchers additionally discovered situations the place discarded boarding passes and misplaced paperwork at airports have been recovered and bought on-line. With biometric and digital verification now commonplace, a scanned passport and selfie can typically be sufficient to bypass ID checks. Criminals are utilizing deepfake know-how to impersonate customers and acquire entry to on-line accounts or companies.
Center Jap travellers will not be immune. Within the Gulf, the place digital adoption is excessive and frequent worldwide journey is the norm, knowledge publicity dangers are rising. The UAE’s Telecommunications and Digital Authorities Regulatory Authority (TDRA) has beforehand warned residents towards utilizing public Wi-Fi networks with out safety. Nevertheless, the latest findings present that much more safe platforms might be compromised via breaches or social engineering.
The report additionally highlights the sale of Reserving.com reservations at steep reductions on darkish internet marketplaces. Criminals are reselling these bookings, typically for over $250, enabling others to remain in inns below another person’s identify.
Loyalty accounts, notably these linked to airways based mostly within the Gulf and Europe, are additionally being focused for resale, elevating considerations in regards to the publicity of high-net-worth people and enterprise travellers.
In accordance with the researchers, the black market attraction of journey paperwork lies of their utility. A stolen passport or hacked account can be utilized to commit id fraud, ebook journey, open credit score traces, or perform phishing campaigns. The non-public nature of the info makes it invaluable and difficult to detect promptly.
Authorities throughout the Center East area are being urged to extend consciousness and encourage travellers to guard their paperwork. Whereas encryption instruments and VPN companies supply some defence, the report stresses the significance of vigilance and warning when submitting private data on-line. Customers are suggested to keep away from importing scans to unofficial web sites and to watch their monetary and travel-related accounts repeatedly.
Picture: Researchers discovered that scanned international passports are extensively obtainable, with costs ranging between $10 and $200. Credit score: Ekaterina Belinskaya