After creating or purchasing the Airbnb accounts, the scammers use them to request bookings from colluding hosts, who then send back a cut of the profits despite no one staying at the property, cybersecurity expert Rick Holland told Daily Beast. Legitimate hosts also help the criminals sidestep Airbnb's rules on government ID -- although the company clearly states it cannot be held responsible for the confirmation of any member's identification. The posts reportedly indicate that fraudsters tap hosts to funnel up to $3,000 at a time, as part of operations both inside Russia and the EU. Still, it's difficult to gauge how extensive or marginal the abuse of Airbnb is.

In its response, Airbnb pointed to its machine-learning algorithms as part of its protections against "suspicious activity." The company added: "we employ micro authorization friction and 3D-Secure to verify if a credit card is being used by its owner and assess the level of risk associated with a transaction."