The World Travel Agents Associations Alliance (WTAAA) has issued a global fraud warning to travel agencies following incidents of a sophisticated scheme using unauthorised IATA accreditation numbers to access airline New Distribution Capability (NDC) systems and issue fraudulent tickets. This warning comes after confirmed cases across multiple regions, including North and South America, where agencies were unaware of the misuse until chargeback notifications revealed financial damage.

Fraudsters have been using spoofed email domains resembling legitimate agencies to gain NDC onboarding or airline portal access. By presenting valid IATA numbers with fraudulent identities, they have managed to issue tickets using stolen credit cards. In one instance, over $350,000 (over US$350,000) in fraudulent tickets were issued. WTAAA emphasises that no Global Distribution System (GDS) breach has been detected; the vulnerability lies in the reliance on IATA number validation for onboarding.

Otto de Vries, Executive Director of WTAAA, stated, "This is a timely reminder that as our industry embraces new distribution technology, our security practices need to keep pace." WTAAA urges agencies to review NDC registrations, monitor BSP and ARC activity, and be vigilant against domain spoofing. Agencies are advised to report any suspicious activity to airlines, GDS security teams, and IATA.

WTAAA is coordinating with member associations globally and calls on airline and distribution partners to enhance their verification processes. De Vries added, "WTAAA exists to give travel agents a unified global voice, and that is exactly what we intend to use here." The organisation continues to work towards implementing stronger safeguards for the travel agency community

This story was selected and published by a human editor, with content adapted from original press material using AI tools. Spot an error? Report it here.