scamwatch_full_cover

What You Need to Know

A widespread phishing scam is targeting travelers using Booking.com. Scammers first infiltrate a hotel’s Booking.com account by tricking hotel staff into clicking malware-laced links. Once inside, they access reservation data and directly message future guests through the official portal, requesting early payment via credit card. Because the messages come from what appears to be the legitimate Booking.com system, many travelers fall for the scam, handing over their credit card details and becoming victims of identity theft and fraud. Despite being known since 2024, this scam continues to harm thousands of travelers worldwide.

What You Should Do

  • Use credit cards—not debit cards. Credit cards offer stronger fraud protection and limit your liability, whereas debit cards could expose your entire bank account if misused.

  • Never trust payment requests via email. Even if an email appears to come from Booking.com, confirm its legitimacy through the Booking.com app, Help Center, or by calling their verified customer service number.

  • Avoid clicking links in unsolicited messages. Instead, log in directly through the official Booking.com website or app to manage your reservations and payments.

  • Monitor your financial accounts. If you suspect you’ve shared card details in error, report it immediately to your bank to block unauthorized charges and prevent further damage.

Think you are being scammed? Call our scam hotline or email us for help:
(801)-724-6211
scamwatch@invisus.com