The sector is particularly vulnerable because reception staff and booking departments often lack formal cybersecurity training, making them easily deceived by nearly identical fake booking emails.
Other countries in the region recorded significantly lower numbers, including Thailand with 88,966 incidents, the Philippines 50,895, and Singapore 38,719.