Online scams: Family says security loophole has been exposed in holiday site
It told BBC Radio Ulster's Consumer Fight Back programme it was sorry to hear about Ms Tyler's experience but it was "confident that the industry standard two-factor authentication process ensures our platform and our customers' data is secure".
How did the holiday scam work?
Marion Tyler had booked a holiday through loveholidays.com for herself, her daughter and two grandchildren to Lanzarote in August. When she wanted to pay off some of her balance, she phoned a number, from an online search, that she believed to be the firm but was actually a scam company. The scammers tricked Ms Tyler into thinking she was speaking to loveholidays and she shared personal details that allowed them to access her account."I genuinely believed it was loveholidays, because she knew all the details of our holiday," said Ms Tyler."She knew right down to the flight times, she knew everything."
After moving Ms Tyler to a WhatsApp conversation, scammers tricked her into transferring £2,000, saying it would save her money on her holiday.But when Ms Tyler rang the real loveholidays the next day to confirm her remaining balance, she was told the firm had not received any payment from her."I actually felt sick. I was in a state of panic," she said."I was absolutely gutted and devastated. It really did affect me and I didn't sleep. I was annoyed at myself for being stupid enough to do it and for falling for it.
"It's soul destroying, how easily they were able to access it and get that very definite information about the holiday."Ms Tyler alerted loveholidays to the scam and was advised to change the email address on her booking and add a password.But, while she was on the call with loveholidays, changes were made to her booking - scammers were changing the destination of her holiday and the passenger times.Ms Tyler's family feared even after updating their security details, scammers could still access her booking.
'I was in shock'
Her daughter-in-law, Marie Tyler, took over and contacted loveholidays.During that call, she opened her internet browser and logged on to the firm's website - having previously used the computer to access her mother-in-law's account, she expected to have to log-in again as the account details had been changed.To her surprise, however, the site brought her straight into Ms Tyler's booking. "I was in shock," Marie Tyler said."I was getting ready to get the verification link sent over to me. I thought: 'I'm in!'"She said she told loveholidays' customers service team that the scammers "must be getting in again and again because you're not reauthenticating people".
The family has reported the scam to Action Fraud and contacted the Information Commissioner's Officer over their data protection concerns. They are also working with their bank to recover the money.Loveholidays told Consumer Fight Back they were "sorry to hear about Marion's experience after calling a number that was not associated with loveholidays and, unfortunately, falling victim to a scam"."The fraudster managed to maintain access to her booking through their cache. We have been in touch with the family and have secured the booking by transferring it to a new account with a new reference number," the company said."We are confident that the industry standard two-factor authentication process ensures our platform and our customers' data is secure, with the issue, in this case, stemming from the customer handing this access over to the scammer."The firm said it had "initiated further steps" should future customers find themselves in a similar position, including improving internal processes "to ensure access to the account is immediately revoked when we are alerted that a customer's account is compromised".
'We have to put it in perspective'
Ms Tyler still hopes to go on the holiday later this year with her daughter and grandchildren."I'm actually really still annoyed about it."It's not pleasant, it's not nice and it's a lot of money, but it's not the worst thing that can happen in your life."We have to put it in perspective. What else can you do?"You can listen to the full story on Consumer Fight Back with Holly Hamilton on BBC Sounds.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Daily Mirror
5 days ago
- Daily Mirror
British family 'scammed out of £1,800' as five-star luxury hotel 'didn't exist'
Gemma Lane and Nicholas Preston were 'devastated' after they arrived at the 'family-friendly' hotel in Antalya, Turkey, and discovered the children's facilities 'didn't exist' A devastated family claim they were 'scammed' out of £1,800 as their five-star Loveholidays resort promised pools, play areas and amenities that 'did not exist'. Gemma Lane and Nicholas Preston, along with their 19-month-old baby Louis, stayed at the hotel in Antalya, Turkey last month after booking a package deal with Loveholidays. The pair picked the family-friendly hotel for its range of children's facilities, including outdoor and indoor pools, a play park and Smurf Village. It comes after women claim 'Our Jet2 holiday was ruined because we flew to the wrong Spanish island by mistake'. However, upon arrival at the resort on July 2, the couple claimed it was evident they'd been 'mis-sold' the all-inclusive, luxury hotel advertised online - as it bore 'no resemblance to the photos'. Mum Gemma says their 'dingy and outdated' hotel room looked nothing like the images and lacked a cot for their toddler, while staff allegedly suggested little Louis could just 'sleep in the bed with them'. As the family explored the hotel's touted children's facilities, they were shocked to discover the 'play park' shown in online photos was merely an area of astroturf and 'derelict land'. According to the holidaygoers, the elaborate slides and climbing frames they saw online didn't exist. To add insult to injury, the indoor pool was closed and cordoned off - supposedly shut for two years - while the 'Smurf Village' looked 'nothing like the photos'. Devastated, 40 year old biomedical scientist Gemma was reduced to tears by the hotel's shocking condition - claiming the family had been 'conned' out of their £1,800 holiday budget. The pair were forced to shell out an additional £1,500 to relocate after point-blank refusing to endure another evening of their 10-day break at the 'appalling' accommodation. Loveholidays expressed regret that the family's experience 'didn't meet their typically high standards' and confirmed they were looking into the matter, though noted their support team weren't given the chance to sort things out before the family bolted from the hotel. Manchester resident Gemma explained: "It was my partner's birthday. We just wanted to have a really nice time on holiday. We booked it specifically because it looked really good for babies. "We arrived at midnight and they took us up to this room and it was this dingy, cave room. There was no cot for the baby. "The lad who took us up to the room said we haven't got a [cot] for tonight. He said the baby could sleep in the bed with us. "This is meant to be a five-star luxurious place. The room looked nothing like the pictures. It was dirty. It was so outdated. The pictures they had [online] didn't reflect reality at all." Following a room switch the next day, Gemma checked out the resort's other amenities but maintains she quickly realised they'd been 'duped' into paying for a luxury break that simply didn't exist. Gemma revealed: "The kids' play area which looked lovely on the pictures with nice parks and lighting, that wasn't there. It was just derelict land. There was meant to be a park with a slide, that wasn't there. It was just derelict land. It was terrible. "We thought there'd be a nice little playground and the Smurf village. Louis would have nowhere to play. The indoor pool was shut and apparently hasn't been open for two years. "The pictures we saw online were either really photoshopped or didn't exist. I don't know if it used to look like that when it first opened. We'd been mis-sold the holiday." Despite flagging her worries with reception and Loveholidays, Gemma claimed the resort and booking site were 'completely unhelpful', leaving the family no choice but to splash out another £1,500 on accommodation elsewhere. Gemma alleges that since their return, Loveholidays has offered a measly £173 compensation for their break, which the family turned down. She continued: "It was like a big scam. We couldn't even speak to anyone at the hotel. Reception was completely unhelpful. "I couldn't stay there and function with a baby. I was in tears. I was really upset. I would've rather got a flight home than stayed home. It was the worst hotel I've ever stayed in. It was more like a two star than a five star. "We thought we were going to this luxurious, five-star hotel. I work for the NHS and you only have a certain amount of times you can have off. I wasn't wasting my 11-day holiday being stuck in that hotel. "And you can't get hold of Loveholidays, it's like a chatbox system. We couldn't speak to anyone at the hotel. No one could speak English. The reviews need to be investigated - they're obviously not real. A Loveholidays spokesperson said: "We're very sorry that Mr Preston and his family's experience at their hotel in Antalya fell short of our usual high standards. "Mr Preston booked alternative accommodation before our On Holiday Support team had the opportunity to offer assistance, however we recognise the concerns raised and are investigating them further with the accommodation provider. "We have been in touch with Mr Preston to apologise and have issued him with a full refund for the unused nights of their accommodation."
Daily Mail
09-08-2025
- Daily Mail
Diaper-wearing creep arrested for sickening request to young girls
A Texas man has been accused of approaching an 11-year-old girl and her friend in a parking lot while wearing only a diaper and a pacifier around his neck. Wesley Worl, 45, allegedly got out of his truck in the disturbing getup on July 29 as the girls were riding their bikes near Andy Woods Elementary School in Tyler. 'Goo goo ga ga, I need a diaper change,' the maniac yelled, according to arrest documents. Worl was arrested and brought to the Smith County Jail on Thursday on charges of soliciting a minor and criminal trespass. The 11-year-old girl told police she was frightened of Worl and ran into a nearby alley with her friend, according to an affidavit obtained by CBS 19. The girls were trembling and barely able to speak, according to the police officer that interviewed them. They said they encountered a 'scary guy' who said, 'Will you change my diaper for me?' On the day of the incident, the girls ran to an adult they recognized, and that adult's son then drove to the area to pick them all up, according to the affidavit. The son was able to get a partial license plate number for the truck of the suspect. Police later used this information to link the truck back to Worl. Police also said Worl matched the description given to them by the minor victims. Worl was arrested on Thursday, nine days after the alleged crime. Police noted that Worl has a sexual fetish for wearing a diaper in public, while also having a history of sexually preying on girls from eight to 12 years old. Starting in 1999, he has had multiple arrests for crimes similar to this one against young girls. He was also convicted of stalking his ex-girlfriend. For the two charges he faces now, his bond has been set at $600,000. He was arrested without incident at his workplace, taken to the Tyler Police Department for questioning and then booked at the Smith County Jail.
BBC News
31-07-2025
- BBC News
Jack Woodley murder: Final three teenage killers named
Three more teenagers who murdered an 18-year-old in a group attack can be named after a court order Woodley suffered a fatal stab wound while being punched, kicked and stamped upon by a group of 10 teenagers in Houghton-le-Spring, Tyne and Wear, in October Brewis, Lewis Rose and Rhys Wear, who are under the age of 18 at the time of sentencing in 2022, were among those found guilty of the murder and sentenced to life with minimum terms of between eight and 13 said the youths had been intent on attacking someone at the Houghton Feast funfair and that Mr Woodley came to their attention for a "trivial reason". Jack Woodley case: Ten teenagers found guilty of murder Three of the 10 youths found guilty of murder previously could not be named because of their ages, but the youngest has now turned Brewis, who was 14 at the time, was sentenced to 13 yearsRhys Wear, who was 14 at the time, was sentenced to 10 yearsLewis Rose, who was 14 at the time, was sentenced to eight years The other seven youths guilty of Mr Woodley's murder have already been identified - Grant Wheatley, Clayton Owen, Sonny Smith, Joe Lathan, Leighton Mayo, Blaine Sewell and Calum family of Mr Woodley, who was from Newton Aycliffe, has been campaigning to raise awareness of the dangers of carrying this year, his mother Zoe McGill welcomed the arrival of the knife angel sculpture in his hometown. Follow BBC North East on X, Facebook, Nextdoor and Instagram.
