Being trapped thousands of miles from home while geopolitical tensions escalate is stressful enough. But scammers have turned the desperation of stranded travelers into a hunting ground, and they're getting sophisticated about it.
When the US and Israeli military strikes on Iran triggered widespread flight suspensions across the region in late February, hundreds of thousands of passengers suddenly found themselves searching frantically for any way out. That's exactly when the fraudsters moved in. They're impersonating customer service teams from Emirates, Etihad Airways, Qatar Airways, and Gulf Air, sliding into direct messages on social media and requesting passenger names, phone numbers, email addresses, and booking references. The requests sound official. They feel urgent. And travelers desperate to get home are falling for them.
How the Scams Actually Work
The criminals aren't just after your booking details. According to Dubai Police, fraudsters have also been impersonating employees of a "Dubai crisis management" entity and falsely claiming connections to local law enforcement to extract even more sensitive data. They're after your digital identity information, including UAE Pass credentials and Emirates ID details. Once they have that, they can execute what's known as a SIM-swap operation. They intercept your two-factor authentication codes and gain access to your bank accounts through mobile apps. In the UAE, your digital identity is tied directly to your phone number, making this particularly dangerous.
The sophistication matters here. These aren't mass emails from a Nigerian prince. These are targeted, personalized attacks that exploit real, verifiable chaos. A traveler searches for flight information online, sees an account claiming to be customer service, and the timing feels right. The account might even have a blue verification checkmark. Except here's the catch: Twitter's (now X) verification system changed. A blue check no longer means the account is authentic. It just means someone paid for it. A gold checkmark indicates a verified business. A grey one belongs to government officials. Most people don't know the difference.
Why Airlines Aren't Making These Requests
The major carriers have all issued clear warnings about what they will never ask for. Emirates has cautioned travelers to engage only with its two official accounts. Qatar Airways confirmed it would never request passwords, one-time passcodes, or banking details via social media or direct messages. These aren't new policies. They're standard practice that scammers are counting on travelers to forget in moments of panic.
Dubai Police have been equally direct. They stressed that they do not request confidential data or verification codes via phone or text messages. If something feels off, it probably is. Suspicious activity should be reported immediately by calling 901 or using the official online crime reporting platform. The police have also documented attempts by fraudsters to impersonate Dubai Crisis Management employees and falsely claim affiliations with law enforcement.
Staying Safe While Stuck
If you're currently stranded in the region, keep these basics in mind. Contact your airline only through details listed directly on their official website. Ignore any unsolicited direct messages, no matter how official they look. Don't share personal or banking information with anyone who reaches out to you first. Airport authorities have also asked passengers not to show up at terminals unless they've been contacted directly by staff and have checked their flight status in advance on the official airline channels.
The situation on the ground remains volatile. Since the attacks began on February 28, authorities detected 174 ballistic missiles, with 161 intercepted and 13 falling into the sea. Eight cruise missiles and 645 of 689 drones were intercepted. Three people died and there were 44 direct impacts. By early March, a limited number of flights operated by major Emirati carriers resumed, primarily to repatriate foreign nationals. Operations are slowly normalizing, but cautiously.
For travelers, the lesson is hard-earned but essential. In moments of crisis, scammers become their most dangerous. They're counting on your fear and your need to act fast. The safest move is always the slowest one: verify directly with official sources, trust your skepticism, and remember that legitimate companies never ask for passwords or verification codes through social media.
