Travelers searching for airline or hotel customer service contacts are increasingly encountering phone numbers that lead straight to fraudsters. The tactic relies on compromised pages from universities, government agencies and other high-authority domains, which scammers load with optimized PDFs containing bogus support lines. These files are indexed quickly by Google and surface in ordinary search results as well as AI Overviews and AI Mode. The Points Guy first detailed the pattern in reporting that drew on multiple traveler complaints and direct checks of affected sites.
How the scheme works
Fraud operators target websites with security gaps, particularly those ending in.edu or.gov, because search algorithms assign them extra weight. Once inside, the intruders upload PDF documents packed with travel-related keywords and fabricated customer-service numbers. The pages are crafted to appeal to automated crawlers rather than human readers, so administrators often remain unaware until the files are already indexed. When a traveler queries something like “Swiss flight change” or “United refund help,” the AI features sometimes pull the planted number and present it as an official escalation line. The same pattern has appeared for cruise lines and booking platforms. Because the source domain carries institutional credibility, the recommendation can look legitimate at first glance.
Real cases and mounting losses
One traveler, Marcia Hannon, needed to adjust a group itinerary on Swiss International Air Lines last July. After the airline’s listed number proved disconnected and its website chat queue stalled, she turned to Google. The number returned led to a person who posed as an airline agent, requested a credit-card authorization form and ultimately charged her card $4,500 through an unrelated merchant. American Express flagged the transaction before it cleared, but many victims are not so fortunate. Similar reports have reached consumer advocates involving other major carriers. In each instance the callers had followed contact details surfaced by Google rather than numbers printed on their tickets or listed on the airline’s verified app. Banks and card issuers have absorbed some losses, yet they are growing more reluctant to absorb repeated charges without lengthy investigations.
Google’s position and the ongoing challenge
Google has stated that its anti-spam systems are effective at removing fraudulent content once detected and that the majority of search results remain free of such material. Company representatives note that pages flagged in recent checks were taken down promptly. Still, the operators simply move to new compromised sites, including municipal pages and other institutional domains, keeping the cycle active. Travelers who notice suspicious results can report them through the three-dot menu next to individual listings, supplying direct feedback that helps accelerate removal. The speed of indexing versus the speed of detection remains the central difficulty.
Practical steps to stay protected
Avoid relying on Google for customer-service numbers when dealing with airlines, hotels or cruise lines. Instead, open the provider’s official mobile app or type its known website address directly into a browser. If a number must be verified, cross-check it against the confirmation email or the back of a physical ticket. Any request for unusual credit-card authorizations or record-locator details should prompt an immediate hang-up and a call to the carrier through a confirmed channel. Travelers who have already shared information should contact their card issuer first to dispute or block charges, then notify the travel provider so a reservation block can be placed. Identity-monitoring services offered by many banks can provide additional safeguards against further misuse of personal data.
