beware of such trades with persons

https://indianexpress.com/article/cities/mumbai...
Man dupes travel portals, books 1,500 air tickets without paying a penny
After discovering an alleged loophole in the payment gateway system of the portals, Parmar — a Class XII passout — approached several travel agencies across the country and provided them air tickets at 80 per cent of the rates available in the market. A 27-YEAR-OLD man from Madhya Pradesh allegedly took at least four travel portals for a ride by booking over 1,500 air tickets without paying a single penny in the last two years. Rajpratap Parmar, who was arrested on Tuesday along with two of his relatives from Datia, made around Rs 2 crore in the process, said the police.

After discovering an alleged loophole in the payment gateway system of the portals, Parmar — a Class XII passout — approached several travel agencies across the country and provided them air tickets at 80 per cent of the rates available in the market.

The alleged scam was unearthed when a Mumbai-based man booked air tickets for Goa. When he took a printout of the air tickets, he realised that the mobile number and email address mentioned on the ticket did not belong to him. Also, the amount that he had paid and the one mentioned on the ticket was different.

Suspecting that his details may have been compromised, the man submitted written complaints to unit 7 of the Mumbai Crime Branch. During investigation, unit VII in charge Satish Taware and Inspector N Sridhankar found out about the scam.

An officer probing the case said that nearly two years ago, Parmar, who hails from Datia in MP, discovered a loophole in some of the travel portal payment gateways.

“Parmar would accept travel bookings from agents across the country. While filling in the person’s details online, he would enter an incorrect mobile number and email address to ensure that the person does not receive any alert. He would then enter his card details and continue with the transaction till he had to select between the submit and cancel payment options,” he added.

“At this point, he would click on cancel and press escape several times to freeze the page. He would then tinker with the URL and write ‘success’ in the URL address bar to show that he had clicked on submit. He then copy-pasted the link to another tab and pressed enter. The system would think the payment has been authorised and generate tickets without Parmar actually having made any payment,” the officer said.

Parmer approached travel agencies through two of his relatives — Pransingh Parmar (48) and Raghvendra Singh (38) — and offered them discounted rates.

“He would book tickets for travel agencies at 80 per cent of the market rates. He had become quite popular and several agents started approaching him. He claimed that over the last two years, he had booked 750 to 800 tickets that could be valued well over a crore. We suspect he has booked over 1,500 tickets,” the officer said.

The crime branch is investigating if any of the travel agents are also involved in the scam.