Travelers beware: Hackers love it when you email your passport copies

In the third quarter of 2024, 422.61 million data records were leaked, Statista reports. Cybersecurity experts warn travelers not to add to the possible losses as they observe an increasing trend of people sending copies of ID documents to their own email. While travelers do it for convenience, it opens them up to fraud and identity theft. The growing threat comes as global travel increases, leaving millions of travelers at risk.

When a hacker breaches an email box, multitudes of sensitive information about the user end up in their hands. "Most of the information people store in their emails would help the hackers send them tailored phishing messages. But when a hacker stumbles upon a copy of an ID document, it's like winning the lottery. This kind of discovery could let them cause a lot of harm in a very short time," says cybersecurity expert Vykintas Maknickas, CEO of an eSIM company Saily.

A stolen passport can be sold on the dark web and ultimately used to steal the victim's identity, make fraudulent purchases, or open credit card accounts. NordVPN's research reveals that 43% of what could be found on the dark web marketplaces consists of personal documents. A copy of a passport would sell for around 600 USD on average. In some cases, it can even go for 3,800 USD.

Identity theft victims not only experience financial losses but also face significant emotional impact, with many reporting anxiety, depression, and a heightened sense of vulnerability.

Old passwords and public Wi-Fi are a hacker's best friends

"Travelers send copies of their documents, such as their IDs, passports, or driver's licenses, to themselves for easy access on their trip. Certainly, it offers some convenience, but it's very alarming from a cybersecurity perspective. It's even more dangerous if a user has not enabled two-factor authentication," says Maknickas.

Travelers are particularly vulnerable to cybersecurity attacks due to their increased use of public Wi-Fi and visits to unsecured, unfamiliar websites. For example, hackers can steal sensitive information by eavesdropping on public Wi-Fi users during a man-in-the-middle attack. If a user enters their email credentials while a hacker is listening, the credentials are compromised.

Weak passwords are also a threat. Many people reuse the same passwords again and again. It is a cybersecurity risk in itself since hackers exploit it by launching credential stuffing attacks.

Experts share simple tips to keep in mind

Travelers can keep their documents safer by taking note of a few simple tips:

- Do not send sensitive documents to unprotected emails. If you are doing so in case you lose your documents, better leave copies with trusted friends or family members.
- Enable two-factor authentication and use strong passwords. Extra protection on your email account can help lower the risk of identity theft.
- Be careful when using public Wi-Fi. Travelers are extremely vulnerable when connecting to an unknown network abroad. Stay vigilant and do not visit banking, shopping, and other sites that require inputting sensitive information. If you must do so, consider using a VPN or an eSIM for trustworthy mobile data.
- Do not scan accidental QR codes. QR codes leading to malicious websites are on the rise. By visiting such websites, travelers can download malicious programs to their devices, compromising security and privacy.

Saily
WeWork 15 Bishopsgate
EC2N 3AR
London, UK
Website: https://www.saily.com
Email: kotryna.kancleryte@nordsec.com

Saily is an affordable and user-friendly eSIM service that helps people to manage mobile and internet connections from anywhere in the world. Saily offers 24/7 instant customer support, flexible plans, and coverage in 190+ countries. Saily was created by the experts behind NordVPN - the advanced security and privacy app. For more information visit saily.com.

This release was published on openPR.