Power Plays & Phishing Scams: The New Frontlines of Travel Disruption

STR Daily Podcast

From Airbnb’s aggressive new lobbying tactics to the rise of sophisticated AI-powered phishing scams, today’s episode dives into the big risks—and bold moves—shaping travel in 2025. It’s a story of power, protection, and the evolving identity of short-term rentals.

We look at two seismic shifts: Airbnb’s aggressive political lobbying tactics and the growing cybersecurity risks facing the hospitality sector.

Airbnb Goes Corporate: From Community to Campaigns
Airbnb is no longer content being the poster child for community-driven tourism. The company is now deploying the same strategies long used by traditional hotel lobbies—funding political campaigns, producing economic impact reports, and openly challenging regulators. With European cities like Barcelona revoking STR licenses and U.S. cities like New York tightening restrictions, Airbnb is striking back. Its data paints hotels and cruise lines as the real culprits of overtourism, and it’s even launched a Super PAC in the U.S. to sway elections in key markets.

This shift marks a transformation in Airbnb’s identity. What was once a decentralised platform of “live like a local” hosts is becoming a centralised powerhouse defending its bottom line. For STR operators, the message is clear: platforms are no longer just partners—they’re political actors. This evolution raises urgent questions about alignment, values, and who really benefits from the industry's future.

The Invisible Threat: Cybersecurity and the Rise of AI-Driven Attacks
While Airbnb battles city halls, the broader hospitality industry is facing a quieter, but equally serious, challenge: cyber threats. According to Booking.com’s Chief Security Officer, phishing scams and credential stuffing attacks are on the rise—and generative AI is to blame. Tools like ChatGPT have made it easy for bad actors to craft convincing, multilingual phishing emails that mimic real guest enquiries or OTA messages.

Many STR operators still use weak passwords, lack two-factor authentication, or fail to train staff on recognising suspicious emails. With attackers now targeting booking systems, payment platforms, and messaging apps, the cost of digital complacency is higher than ever. Hosts must prioritise cybersecurity practices—just like they do guest experience and pricing strategy. This isn’t just an IT problem—it’s a trust problem, and in the hospitality business, trust is everything.

What STR Hosts Should Do Now
âś… Monitor Your Platform Partnerships
Understand how your listing site or PMS provider is engaging in political activity—and what that means for your business.

âś… Double Down on Cyber Hygiene
Use password managers, activate 2FA, and train your team to spot red flags. Secure your booking systems like you secure your property.

âś… Stay Informed, Stay Empowered
The landscape is shifting fast. Hosts who stay passive risk being left behind or caught off guard—whether by regulation or ransomware.


Final Thought: Power and Protection Define the Next Chapter
As platforms take on politics and tech accelerates both opportunity and risk, the role of the STR host is evolving. It's no longer enough to just offer a clean space and good communication—you need to think like a strategist, a watchdog, and a digital gatekeeper. The question is: are you ready?

Ready to elevate your direct booking game? Visit the Boostly website for the tools, strategies, and support you need to succeed in 2025 and beyond. And remember: Book Direct

Check out the other Boostly podcast

Down