Inexperienced travellers make the obvious mistakes – leaving valuables on the beach, walking into the wrong neighbourhood at midnight, getting into the unmarked taxi. Experienced travellers don't make those. They make a different, subtler set, and they make them confidently because they have miles in the bank.

Here are 12 of them.

1. Trusting the hotel safe

Hotel safes are not safes. They are deterrent boxes. The override codes are written on the inside of the door of most of them, visible to any maid or member of staff. The four-digit codes can be brute-forced in 90 seconds. Several major hotel safe brands have universal master codes that have been on the internet for years.

The fix: don't put anything in a hotel safe you couldn't replace. Carry your passport on you in the day; lock it inside your suitcase with a TSA-approved padlock at night. Or use a small portable safe that cables to a fixed object. Either is meaningfully more secure than the in-room safe.

2. Photographing your boarding pass for Instagram

The barcode contains your full passenger record locator (PNR). Anyone with the photo can log into the airline, change your seat, cancel your flight, see your home address, and access your loyalty account. It looks like a number; it's actually a key.

The fix: never photograph boarding passes, baggage tags, or any document with a barcode. If you must post a travel photo, use the airline's branded social posts, not your own boarding pass.

3. Using the airport USB charging port

Public USB ports can be modified to install malware ("juice jacking") or steal data. The risk is small but non-zero, and growing as the technology gets cheaper. Airports, hotels, and conference centres are the highest-risk environments because they're high-volume and unmonitored.

The fix: a £5 USB data blocker (a small adapter that allows charging but blocks data transfer), or just use a wall outlet and your own charging brick. Never plug your phone directly into an unfamiliar USB port.

4. Telling the truth on the customs form

Counterintuitive advice: don't lie. Do think about what you're declaring. Many travellers mention valuable electronics, large amounts of cash, or specific medications on customs declarations because they think they're supposed to. They're often not – and the declaration is sometimes routed to people who shouldn't see it.

The fix: read the form carefully. Declare only what's actually required. If you're carrying expensive equipment, look up your destination's specific rules in advance – most countries don't require you to declare a personal laptop, even if it's valuable.

5. Posting "just landed" before leaving the airport

A surprising amount of trip-targeting starts on social media. "Just landed in Bangkok!" tells anyone watching that your home is empty and that you're 20 minutes from a major arrivals hall, in an unfamiliar city, almost certainly carrying cash and a passport.

The fix: post when you've left, not when you've arrived. Or post nothing at all. Or use the close-friends features that limit visibility. The traveller who posts "just got home from a great two weeks in Bangkok" is dramatically harder to target than the one who live-blogs the trip.

6. Using the same PIN abroad as at home

ATM skimming and card cloning incidents are concentrated in tourist zones. If your card is skimmed and your home-country PIN is captured, the same PIN often works for online verification, secondary cards, and (in some countries) building access.

The fix: use a different PIN for travel cards, and a different one again for any new ATM card you set up specifically for trips. Also: cover the keypad with your other hand, every single time, including in your home country.

7. Carrying one currency in one place

Wallet stolen on day three. All cards in the wallet. All cash in the wallet. Now the trip is a phone call to the embassy and a wire transfer from a relative.

The fix: split. Primary card in wallet, secondary card in luggage. Day's cash in pocket, emergency cash hidden somewhere unobvious in luggage (a sealed envelope in the bottom of a packing cube works). Three independent failures need to happen before you're in real trouble. With everything in one place, it takes one.

8. Ignoring the embassy registration

Five minutes of online form-filling. Free. Means your government knows you're in the country if something happens. Almost no traveller does it because nothing has ever happened to them.

The fix: register with your embassy or your country's equivalent (UK: FCDO; US: STEP; Canada: ROCA; Australia: Smartraveller) before every trip to anywhere with non-trivial risk. Five minutes, no downside, occasional upside.

9. Trusting the "tourist police"

Many countries have legitimate tourist police. Many countries also have people pretending to be tourist police, particularly in the most touristy areas. The difference matters: real tourist police don't approach random foreigners and ask to see passports or wallets.

The fix: never hand over your passport on the street. Ask for ID. Insist on going to a station to verify. Real officers will agree. The fakes will leave.

10. Buying travel insurance without reading it

The single most common travel insurance failure: discovering after a claim that the policy doesn't cover what the traveller assumed it covered. Common gaps: pre-existing conditions, "adventure" activities (which often includes anything more energetic than walking), evacuation cover (which many policies exclude or cap at unhelpfully low limits), and policies that lapse the moment you're declared a "long-term traveller".

The fix: read the policy wording, specifically the exclusions section, before you buy. Pay attention to evacuation cover (£1m+ minimum for high-risk destinations) and the activities list. The cheap policy that doesn't cover what you need is worse than no policy at all.

11. Putting everything in carry-on "to be safe"

The instinct is right: checked bags get lost, opened, and stolen from. The execution is often wrong: the carry-on becomes a single point of failure. One overhead bin theft, one rushed gate change, one accidental swap, and the entire trip is compromised.

The fix: split high-value items between carry-on and "personal item" (a backpack or laptop bag that stays at your feet). Keep passport, primary card, phone, and medication in the personal item. The carry-on holds everything else valuable. Two bags, both of which would have to fail for the trip to fail.

12. Treating "I've been here before" as a safety strategy

The biggest mistake experienced travellers make. The city you visited five years ago is not the city today. Neighbourhood risk profiles change. Scam patterns evolve. Political situations shift. The taxi route that was safe in 2019 isn't necessarily safe in 2026.

The fix: refresh your understanding before every trip, even to places you know well. Re-read the current advisories. Check current incident patterns. Update your apps. Familiarity is useful; it's not a substitute for current information.

The pattern

Most experienced-traveller mistakes share a shape: a once-correct shortcut that hasn't been updated in years. The hotel safe used to be reasonably secure. Customs forms used to be private. Tourist police used to be reliably tourist police. The fix in every case is the same: periodic re-examination of habits that feel like wisdom but are actually inertia.

The travellers who avoid this are the ones who stay curious about how the world is changing, even in the places they think they know.