Apple, Costco, Airbnb, and Booking.com: Top Scams of the Week
Author: Trend Micro
This week, we’ve found lots of scams in which scammers are impersonating famous brands, including Apple, Costco, Airbnb, and Booking.com. Would you have been able to spot all these scams?
Phishing Scams
Impersonating trusted brands, scammers love to spread phishing links via text message or email that lead to phishing sites designed to steal your personally identifiable information (PII): email address, credit card number, Social Security number, and more. No matter what false pretenses scammers employ, their goal is to use your PII to commit cybercrimes, such as draining your bank account or stealing your identity.
Most often, scammers create fake online survey forms and use various incentives like sales campaigns or free gifts to try to lure you into revealing your PII. Below are some examples:
Apple Survey Scam
Posing as Apple, scammers pretend that you need to manage the delivery of a gift by clicking on the attached link:
If you click on the link, you will be taken to an online form that states you’ve won a gift:
Apple Survey Scam (1/2)
Scammers will then instruct you to fill out the form and provide lots of PII, including a delivery address and credit card details. Scammers will record this PII and use it for their own good. Don’t let them!
Apple Survey Scam (2/2)
Block Scam Texts for FREE
To protect yourself from scam texts, check out Trend Micro Check — our 100% FREE mobile app that blocks scam and spam texts from entering your inbox.
Not only will it block unwanted texts, but Trend Micro Check can also keep you safe from malicious links on all your messaging apps (WhatsApp, Telegram, Tinder, etc.) and shield you from dangerous sites as you browse the web. Download today for free (available for Android and iOS).
Costco Survey Scam
Besides text messages, scammers also often send tricky phishing emails. This week we’ve detected a lot of fake Costco emails with bogus survey links. Have you seen this before?
The button will take you to a fake Costco survey page where you could end up exposing all your PII. Don’t fall for the scam!
Fake booking websites – Airbnb and Booking.com
If you’re planning a trip this summer, chances are that you might need to make reservations on booking websites — but are you sure the websites you visit are legitimate? We reported on copycat Airbnb and Booking.com websites months ago, and this week we’ve detected even more.
Sample URLs of fake booking websites:
- shrtlink[.]net
- securepropertycheck[.]com
- airbnb[.]ld83528[.]ru
- booking[.]upgrade-account[.]com
Note: The legitimate web addresses are Airbnb.com and Booking.com. Keep an eye out!
Again, scammers could access your PII if you enter it onto these fake websites, such as your full name, address, phone number, and credit/debit card info. With such information, cybercriminals can commit any number of other crimes, including identity theft. Be careful!
Tips to Stay Safe Online
- Double-check the sender’s mobile number and email address. Even if it seems legitimate, think twice before you take any action.
- Free gifts are often a red flag.
- Only use official websites and apps. Never click on dubious links!
- Check if any of your PII has been leaked and secure your social media accounts using Trend Micro ID Protection.
- Finally, add an extra layer of protection to your devices with Trend Micro Maximum Security. Its Web Threat Protection, Ransomware Protection, Anti-phishing, and Anti-spam Protection will help you combat scams and cyberattacks.
If you’ve found this article an interesting and/or helpful read, please SHARE it with friends and family to help keep the online community secure and protected. Also, please consider leaving a comment or LIKE below.
This article was published in collaboration with Trend Micro.
Image source: unsplash.com
Report a Scam!
Have you fallen for a hoax, bought a fake product? Report the site and warn others!
Scam Categories
Help & Info
Top Safety Picks
Your Go-To Tools for Online SafetyDisclaimer: Some of the links here are affiliate links. If you click them and make a purchase, we may earn a commission at no extra cost to you.
- ScamAdviser App - iOS : Your personal scam detector, on the go! Check website safety, report scams, and get instant alerts. Available on iOS
- ScamAdviser App - Android : Your personal scam detector, on the go! Check website safety, report scams, and get instant alerts. Available on Android.
- NordVPN : NordVPN keeps your connection private and secure whether you are at home, traveling, or streaming from another country. It protects your data, blocks unwanted ads and trackers, and helps you access your paid subscriptions anywhere. Try it Today!
- Incogni : Incogni automatically removes your personal data from data brokers that trade in personal information online, helping reduce scam and identity theft risks without the hassle of manual opt-outs. Reclaim your privacy now!
Popular Stories
In a nutshell: A good VPN protects your privacy with strong encryption, a strict no-logs policy, and fast protocols like WireGuard. The best VPNs also offer wide server coverage, leak protection, and easy-to-use apps for all devices. For 2025, the top providers are NordVPN, ExpressVPN, Surfshark, Proton VPN, Private Internet Access, CyberGhost, and Mullvad—each excelling in speed, security, or value. In an age where every click is tracked, a Virtual Private Network (VPN) is no longer just a luxury—it's an essential tool for digital privacy and security. A VPN works by creating a secure, encrypted tunnel between your device and the internet, masking your real IP address and protecting your sensitive data from prying eyes. But with hundreds of providers out there, how do you sort the secure from the suspect? This guide breaks down the non-negotiable features of a quality VPN and highlights the 7 top-rated services for 2025. What to Look for in a Good VPN: The 4 Non-Negotiable Pillars 1. Ironclad Security Features Strong Encryption: AES-256, the gold standard. Secure Protocols: OpenVPN, WireGuard, NordLynx, Lightway. Avoid PPTP. Kill Switch: Ensures no accidental IP leaks. Leak Protection: Covers DNS, IPv6, and WebRTC. 2. Verified Privacy Practices No-Logs Policy: No activity or metadata tracking. Independent Audits: Verification by third parties. Safe Jurisdiction: Prefer countries outside the 5/9/14 Eyes alliances. 3. High-Speed Performance Fast Protocols: WireGuard and equivalents. Large Server Network: Less crowding, more reliable speeds. 4. Essential Usability Features Multi-Device Apps: Windows, Mac, iOS, Android, routers. Simultaneous Connections: One account, many devices. Unblocking Power: Netflix, Hulu, BBC
How to Protect Yourself and Your Family After a Data Breach When Your Data Falls Into the Wrong Hands Just received that terrifying notification? Or perhaps you've noticed suspicious activity in your accounts? Take a deep breath. A data breach, the unauthorized access or exposure of sensitive, protected, or confidential data, is a deeply unsettling event. It can plunge you into a world of worry, bringing risks from financial losses and identity theft to significant emotional distress and reputational damage. The numbers don't lie: according to a 2024 report, the number of data breach victim notices has grown by a staggering 211% year-over-year. This isn't just a distant threat; it's a stark reality many individuals face. This year alone, we've seen major organizations like Adidas and Qantas grapple with high-profile data breaches, affecting countless customers. This underscores a critical truth: nobody is untouchable. Subsequently, strategic action is the only way to minimize the risk and protect your future. This guide is your emergency action plan, designed to walk you through every crucial step—from confirming the breach to fortifying your digital life for the long term. Part 1: Confirming the Breach and Understanding the Damage The very first step is to answer the question definitively: Was my data compromised, and if so, how badly? Start with the basics: Check Official NotificationsReputable companies are legally obligated to inform you if your data was part of a breach. Look for official emails, letters, or public announcements. Check Verified Breach DatabasesPlatforms like HaveIBeenPwned help you see if