Every Hajj season, pilgrims lose thousands of pounds to fraudulent travel operators, fake websites, and scam artists who exploit the urgency and emotion of the pilgrimage. With Hajj 2026 approaching, authorities in Saudi Arabia, the UK, and several other countries have issued fresh warnings about the tactics used to defraud intending pilgrims. Here is how to protect yourself.

The Most Common Hajj Scams

According to cybersecurity firm Resecurity, which monitors Hajj-related fraud annually, and the Council of British Hajjis (CBHUK), the most common scams targeting pilgrims include:

  • Fake travel agencies: Fraudsters set up professional-looking websites or social media pages offering Hajj packages at suspiciously low prices. They collect payments - often thousands of pounds per pilgrim - then disappear shortly before departure. Victims are left without a booking, without a visa, and with no way to recover their money.
  • Fake Nusuk websites: Fraudulent websites have been discovered impersonating the official Nusuk platform (the only legitimate Saudi government portal for Hajj bookings). These sites collect personal data, passport details, and payment information from unsuspecting pilgrims.
  • Substandard packages: Some operators sell packages at market rates but deliver significantly worse services than promised - hotels further from the Haram than advertised, overcrowded rooms, missing meals, or no transport to the holy sites. The operator exists but the service does not match the contract.
  • Visa scams: Individuals or unlicensed agents claim they can arrange Hajj visas outside the official Nusuk system. Since 2023, Hajj visas for many countries - including the UK - are only available through the Nusuk platform. Anyone offering an alternative route is likely fraudulent.

Red Flags to Watch For

UK police and CBHUK have identified several warning signs that should make any pilgrim pause before booking:

  • Prices significantly below the market average. If a package costs GBP 3,000 when comparable packages are GBP 6,000-8,000, something is wrong. Real Hajj packages must cover flights, hotels near the Haram, Mina and Arafat arrangements, local transport, and taxes. There is a floor below which legitimate operators cannot go.
  • Payment by cash or direct bank transfer to a personal account. Legitimate operators accept card payments or bank transfers to company accounts. If asked to pay into an individual's account, walk away. If the company is fraudulent, recovering money from a personal account is virtually impossible.
  • No clear contract. Agents who avoid sharing a detailed contract - with hotel names, room sharing arrangements, meal plans, and transport details written in plain language - are likely hiding the fact that they have not actually booked these services.
  • Pressure to book immediately. "Only two places left" or "price goes up tomorrow" are classic high-pressure sales tactics designed to prevent you from doing due diligence. Legitimate operators do not need to pressure pilgrims into rushed decisions.
  • No ATOL or ABTA protection (UK pilgrims). In the UK, check that the operator is ATOL protected (for packages including flights) and ideally an ABTA member. This provides financial protection if the company goes bust.

How Saudi Arabia Is Cracking Down

Saudi Arabia has taken significant steps to combat Hajj fraud for 2026. The Nusuk platform is now the sole official channel for Hajj bookings in many countries, eliminating the middlemen who historically enabled fraud. All hospitality providers in Makkah must obtain official licensing before operating during the season. Unauthorised Hajj facilitators face fines of up to SAR 100,000 (approximately US$26,600), deportation, and 10-year entry bans.

The Kingdom has also explicitly penalised intermediaries who transport, shelter, or assist unauthorised pilgrims - targeting the informal networks that have historically enabled both fraud and dangerous unlicensed pilgrimages.

How to Book Safely

Follow these steps to protect yourself:

  1. Book only through the official Nusuk Hajj platform or through operators that are listed on it. CBHUK has issued a public warning specifically about this for UK pilgrims.
  2. Verify the operator's credentials. In the UK, check ATOL and ABTA registration. In other countries, verify with your national Hajj authority that the operator is officially licensed.
  3. Read the contract in full. Confirm hotel names, distances from the Haram, room sharing ratios, meal inclusions, transport arrangements, and Mina tent specifications.
  4. Pay by credit card where possible. Credit card payments offer Section 75 protection in the UK, meaning you can claim a refund through your card issuer if the operator fails to deliver.
  5. Check reviews and references. Ask friends or family who have performed Hajj recently which operator they used and whether the service matched the promise. Community word-of-mouth remains one of the most reliable safeguards.
  6. Never share passport details on unofficial websites. The only legitimate sites that need your passport information are the official Nusuk platform and your verified, licensed Hajj operator.

What to Do If You've Been Scammed

If you suspect you have been defrauded:

  • Report it to your local police immediately
  • Contact your bank or credit card provider to attempt a chargeback
  • Report the operator to your national Hajj authority
  • In the UK, report to Action Fraud (0300 123 2040) and CBHUK
  • If the fraud involves a fake website, report it to the National Cyber Security Centre

Hajj is a sacred obligation and a deeply personal journey. Do not let a fraudster steal both your money and your opportunity to perform it. Take the time to verify, check, and confirm before handing over any payment.