On 17 July 2006, the tourist resort of Pangandaran on Java’s south coast was hit by a tsunami, resulting in 413 fatalities and severe damage to buildings. The tsunami resulted in major rebuilds with a focus on mass tourism. Assessments of the impact of a future tsunami focussed on building development and suggest limited change since 2006. This article presents a case study on the development of (largely domestic) tourism in Pangandaran and how this has increased the tsunami disaster risk. Tourist numbers were stable at about 900,000 visitors a year prior to the tsunami, down to slightly over 250,000 visitors a year in its aftermath, and from 2007 onwards numbers are doubling every three years to about 4 million visitors in 2019. The increase has been most pronounced during weekends. Prior to 2006, Pangandaran was characterized by wooden structures and one- and two-story buildings of clay-brick masonry; by 2019, 14 three to six-story hotels have been erected along the waterfront. With many more visitors, most of whom are unfamiliar with tsunami risks, and shelter facilities for less than a quarter of visitors during peak times, future impacts and the potential cost to life are considerably higher now than in 2006, especially if a tsunami were to hit over a weekend. All tourists upon arrival and throughout their stay should be better informed about the risks of tsunamis, and of the location of tsunami shelters and evacuation routes.