NEWS: WTAAA Issues Global Alert on Travel Agency Scams Exploiting IATA Numbers

The World Travel Agents Associations Alliance (WTAAA) has issued a worldwide warning regarding a sophisticated fraud scheme targeting travel agencies. The scam involves the misuse of IATA accreditation numbers to gain unauthorized access to airline NDC (New Distribution Capability) systems.

While no GDS systems have been breached, WTAAA emphasizes that security practices must evolve alongside new distribution technologies.

“The agencies affected in these cases did nothing wrong; their credentials were used without their knowledge,” said Otto de Vries, Executive Director of WTAAA. “This is a timely reminder that as our industry embraces new distribution technology, our security practices need to keep pace.”

Nature of the Fraud

Fraudsters have been using spoofed or look-alike email domains mimicking legitimate agencies to request NDC onboarding or airline portal access. Once approved, they exploit the stolen credentials and IATA numbers to issue tickets, often using stolen credit cards. Some reported incidents have resulted in losses exceeding US$350,000.

Agencies typically discover the fraud only when chargeback notifications arrive, by which time significant financial damage may have already occurred. WTAAA stresses that IATA number validation alone is insufficient to prevent these attacks.

Recommended Precautionary Measures

WTAAA urges travel agencies and partners to take the following steps:

• Review active NDC registrations: Verify all airline portal connections and NDC agreements. Investigate and report any unfamiliar activity.

• Monitor BSP and ARC activity regularly: Check for unusual ticket issuance, especially on carriers or distribution channels not commonly used.

• Be alert to domain spoofing: Watch for email domains closely resembling your own and notify partners of suspected fraudulent use.

• Report suspicious activity promptly: Contact airlines, GDS security teams, IATA, and national travel associations to maintain broader awareness.

  
  

Ongoing Coordination

WTAAA is actively coordinating with member associations worldwide to monitor and respond to these incidents. Agencies identifying similar activity in their markets are encouraged to contact WTAAA directly to help establish a clearer global picture of the fraud.