Phishing Scams Keep Targeting Past Victims for Months

Victims of online travel visa scams are being subjected to sustained harassment campaigns lasting months after their personal data is first stolen, with scammers repeatedly contacting targets by phone and text using information gathered during the initial fraud.

British actor Lisa Riley experienced the scheme firsthand while preparing to travel to the United States. After locating what appeared to be a legitimate Esta application site through a Google search, she submitted her passport, banking, and personal details. When her confirmation failed to arrive within the expected timeframe, she contacted the site and received an unusual response containing a link to a page displaying incoherent text — a hallmark of fraudulent operations.

Read more UK Social Media Account Hijacking Scam Losses Surge 400% in One Year →

The scam exploits a well-documented vulnerability in consumer behavior: travelers unfamiliar with official government portals often turn to search engines, where fake Esta sites can appear prominently among results. Once personal and financial details are entered, that data can be stored, sold, or reused by criminal networks to conduct follow-up fraud attempts for an extended period.

Cybersecurity experts and consumer advocates warn that the secondary phase of such scams — the persistent follow-up calls and messages — can be as damaging as the initial theft. Victims may be targeted with impersonation schemes, additional phishing attempts, or pressure tactics designed to extract further payments or information from people already identified as susceptible targets.

Authorities advise travelers to apply for Esta authorization exclusively through the official U.S. government website and to remain vigilant about unsolicited contact following any online transaction involving sensitive personal data. Continue reading at Business | The Guardian.