Hotel Booking Scam - How to Protect Yourself

Common Types of Hotel Booking Scams

• Reservation hijacking. Scammers hack hotel staff accounts or third-party booking software to access your real reservation dates, confirmation numbers, and contact details. They then message you via WhatsApp, SMS, email, or even the booking platform's official chat, claiming a payment failed and demanding you re-enter your card details through a fake link.
• Clone and lookalike websites. Fraudsters build counterfeit websites with URLs closely resembling official hotel chains or major travel agencies. These sites lure travelers with steep discounts, steal payment credentials, or tack on hundreds of dollars in fake fees.
• Fake or hijacked property listings. Criminals list non-existent luxury rentals on legitimate platforms or hijack existing listings by swapping in fake addresses and contact details. Travelers arrive only to discover the property does not exist or belongs to an unrelated business.
• Unsolicited travel agent offers. Scammers reach out via social media, phone calls, or texts claiming to offer exclusive vacation deals. They ask for direct bank transfers or wire payments and send a forged booking confirmation before disappearing.

Key Red Flags to Watch For

• Artificial urgency. Messages threatening to cancel your stay within a few hours unless you click a link and pay immediately are a classic phishing tactic.
• Requests outside official channels. Legitimate hotels and platforms will not ask you to verify credit card numbers, passwords, or one-time passcodes over WhatsApp, SMS, or external links.
• Unusual payment methods. Requests to pay via wire transfer, cryptocurrency, gift cards, or a personal bank account almost always indicate fraud.
• Suspicious sender details and links. Check for subtle typos in email domains, shortened URLs, or international phone numbers that do not match the hotel's country.

How to Protect Yourself

• Verify independently. If you receive an urgent message about an existing booking, do not click the provided link. Open the official booking app directly or call the hotel using the phone number listed on its verified website.
• Pay with a credit card. Avoid using debit cards, bank transfers, or cash apps for bookings. Credit cards provide strong fraud protection and allow you to dispute unauthorized charges.
• Research before booking. Type hotel URLs directly into your browser rather than clicking sponsored search ads, and check recent guest reviews on trusted platforms like Booking.com to ensure the property is genuine.

What to Do If You Were Targeted

• Contact your bank immediately. Call the number on the back of your credit or debit card to freeze the account, report the fraud, and dispute any charges.
• Change compromised passwords. Update the password on your booking platform account and any other accounts where you reused the same login credentials.
• Notify the platform and hotel. Report the scam message directly to the booking site's customer support and alert the hotel's front desk so they can secure their systems.