Fraud Detection & Prevention Policy

Bookmyairtravel LLC

Effective Date: 28/07/2025

Reporting Email: fraud@bookmyairtravel.com

1. Purpose

This policy aims to protect customers, partners, and Bookmyairtravel LLC from fraudulent activities related to travel bookings, payments, and platform usage within the United States market.

2. Scope

Applies to:

• - All customers and users
• - Travel agents and affiliates
• - Internal employees and contractors
• - All transactions on our website and mobile applications

3. Types of Fraud Addressed

• • Payment fraud (e.g., stolen cards)
• • Identity theft
• • Account takeovers
• • Fake/fraudulent bookings
• • Promo/refund abuse
• • Reseller impersonation
• • Chargeback fraud

4. Fraud Detection Mechanisms

a. Risk Scoring

• - IP location mismatch
• - Unusual booking patterns
• - Use of high-risk devices or browsers
• - Multiple failed transaction attempts

b. AI & Machine Learning Tools

• - Automated behavior analysis
• - Integration with tools like Kount, Sift, or internal ML systems

c. Real-Time Security Triggers

• - OTP/email verification for sensitive actions
• - Suspicious activity alerts
• - Email domain checks (free vs verified)

5. Prevention Measures

a. Customer Authentication

• - 2FA on login and bookings
• - Device/browser fingerprinting
• - Alert on new IP/device access

b. Payment Security

• - PCI-DSS compliant gateway use
• - AVS, CVV, and 3D Secure verification
• - Blocking flagged BINs and card types

c. Booking Verification

• - Name match between cardholder and traveler
• - Suspicious bookings held for manual review
• - IP velocity and pattern tracking

6. Incident Response Protocol

• 1. Automatically flag and isolate suspicious transactions
• 2. Notify fraud team and customer
• 3. Investigate using logs, booking metadata, and payment details
• 4. Take necessary actions (block, reverse, escalate)
• 5. Maintain records for at least 2 years

7. Fraud Reporting

• Customers or agents can report suspected fraud at:
• 📧 fraud@bookmyairtravel.com
• A dedicated team monitors this 24x7.

8. Internal & Partner Compliance

• • All team members trained quarterly on fraud risks
• • Partner agents undergo enhanced KYC
• • Access to admin tools monitored and restricted

9. Regulatory Compliance

This policy is aligned with:

• - PCI-DSS standards
• - U.S. FTC consumer protection rules
• - Gramm-Leach-Bliley Act (GLBA)
• - CCPA/GDPR for data security

10. Review & Updates

• Reviewed every 6 months or after any major security incident

• Policy updates approved by Compliance & Legal heads

Summary

Bookmyairtravel LLC is committed to secure, trustworthy travel experiences. We actively prevent, detect, and respond to fraud to ensure the safety of our customers and systems.