An online holiday scam cost one couple $2800. This is how the deception unfolded

Brett and his wife Sally were planning the European holiday of a lifetime when they made an accommodation booking online that "didn't smell right".

They had booked a hotel in Italy through a well-known booking website and were messaging the property through the booking platform to ask questions about the location and parking.

"They came back and gave us some information, and we went backwards and forwards with them over the course of, you know, 12 hours or 20 hours or something," Brett, who didn't want to share the family's surname, said.

Then a little while later a final message came through from the property, something along the lines of: "We hope that we have answered all your questions. By the way, we need you to pay a deposit. Here's a link."

The couple, who reside in Brisbane, clicked on the link and paid the deposit, which came to $2803.46.

Within 90 minutes, the sum had been deducted from their credit card. It was only then, when they had time to breathe in their busy day, they realised something was a bit off.

It was a "man in the middle" cyber attack. Brett suspects the hackers had intercepted the Italian accommodation provider's network and had been watching the interactions between Brett and the hotel, and then had jumped in, impersonating the hotel.

The hotel confirmed they hadn't sent the final message, and the booking platform confirmed users would never be asked to pay a deposit using a third-party payment system.

The couple's bank was unable to recover the money, leaving them out of pocket.

Airline Emirates alerted members this week it had suspended its social media advertising after identifying fraudulent advertisements circulating on social media platforms.

It comes as new research from security provider McAfee found nearly one in five Aussie holidaymakers have fallen victim to a scam while booking a holiday - one in five losing money.

McAfee's Australia Safe Summer Travel research showed younger holidaymakers, aged 18-34 are most at risk, with 30 per cent having been affected by a travel scam.

Many have lost money by providing bank details on a fake site and others have clicked on a link from an unknown source that was a scam. Other people have encountered manipulated photos of holiday destinations.

McAfee head of APAC, Tyler McGee, said it's more important than ever to stay alert.

"If an offer looks too good to be true, it probably is," he said, advising people to take "a moment to double-check before you book".

Scam (phishing) emails and text messages, and fake travel deals, can lead to scammers having access to sensitive personal or financial information. Avoid clicking unknown links or sharing personal details.

Do a reverse image search to spot fake accommodation listings. Read reviews and book through known, trusted platforms.

Are your destination, scammers may pose as hotel staff or tour guides. Double-check identities before sharing info or valuables.

Public Wi-Fi can expose your data. Use a VPN to browse safely while travelling.

Sharing your location in real-time can attract scammers at home or on holiday. Post updates after your trip instead.