Victims lose hundreds of thousands of pounds to Booking.com holiday scam
As temperatures heat up and many of us start planning summer holidays, there are fears about a booking scam that could leave you thousands of pounds out of pocket.
It could be as simple as a message or email from the hotel you have just reserved a stay with, asking for a payment to secure a your holiday.
And because it comes through Booking.com and looks legitimate, you rush to pay or hand over credit card details.
They are not going to the hotel, however, but to scammers who have taken over a hotel's Booking.com account.
This type of fraud can be costly. Between June 2023 and September 2024, Action Fraud received 532 reports of scams of this sort, with a total of £370,000 lost.
They believe fraudsters are using phishing attacks against accommodation providers to take over their Booking.com accounts.
They then send unexpected in-app messages, emails, and WhatsApp messages to customers.
This means the usual warning signs of a scam, such as odd text messages or emails, do not apply.
Action Fraud do not believe these take-overs are linked to Booking.com's backend system or infrastructure.
The most important thing is to check that any communication you receive is genuine.
If you receive any urgent payment requests, you should immediately reach out to the Booking.com Customer Service team to confirm.
Be aware that no genuine Booking.com transaction will ever require a customer to provide their credit card details by phone, email, or text message (including WhatsApp).
Although Fraud Action says a hotel provider may reach out to request payment information, like credit card details.
But you should always verify the authenticity of the message before providing any information.
You should also treat any links you are sent with suspicion.
Authentic payments won't take place on a site other than Booking.com or their app.
Booking.com also advises: 'Always double-check the property's payment policies listed on the booking page or in your confirmation email. If there is no pre-payment policy or deposit requirement outlined, but you're asked to pay in advance to secure your booking, it is likely a scam.'
There are other giveaways of fraud you can still look out for.
These include grammar and spelling mistakes, as well as urgency.
If you realise too late that you have typed financial details into a site, get in touch with your bank in case they need to block or cancel your card.
The fraudsters send messages that are designed to make you panic.
They tell you there has been a problem with your credit card, of your banking details need to be verified, adding that without a response your reservation will be cancelled.
There might be a link in the message for you to provide your banking details.
Holidaymakers should also be aware of another scam that employs fake Booking.com web pages.
People are then tricked into downloading a malicious file that gives criminals full control of your device. More Trending
According to technology firm HP Wolf Security, links to these web pages come in email.
When customers access the site and press 'accept' to cookie before they can view the webpage, thjat triggers the file to download.
Booking.com said: 'Unfortunately, there is an increasing number of online scams targeting many businesses operating in the e-commerce space. With the rise of AI, cybercriminals are able to create increasingly sophisticated scams.'
They added that Booking.com continue to invest in cybersecurity, and stressed incidents on the platform were rare.
Get in touch with our news team by emailing us at webnews@metro.co.uk.
For more stories like this, check our news page.
MORE: The 'ASAB' warning anyone going on a holiday in 2025 should know
MORE: The way you pay council tax could change – here's how
MORE: Free hand luggage is not the win you think it is
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
The Guardian
6 hours ago
- The Guardian
‘Your reservation is at risk': beware the Booking.com scam
You've booked the hotel and you're starting to look forward to your break when you get a message telling you to make a payment, or give your credit card details, to secure your holiday. It's come through the app, or in an email that looks legitimate, so you get out your credit card in panic and pay. As the summer holidays get into full swing many of us are primed to hear from travel providers – making it open season for scammers. One of many holiday-related frauds preys on customers who have booked somewhere to stay via the platform either via its website or app. In the UK, Action Fraud received 532 reports of the scam between June 2023 and September 2024, with victims losing a total of £370,000. It says that it is likely hackers are using phishing attacks against accommodation providers and then using the details to contact customers – sometimes via WhatsApp but often through the real platform. This means the usual things to look out for – odd email addresses, or texts, may not apply. Cases seen by Guardian Money have typically involved the theft of several hundred pounds. The global nature of the platform means it can happen to you wherever in the world you live, or plan to holiday. Regulators in countries including Australia have warned of the issue. said: 'Unfortunately, there is an increasing number of online scams targeting many businesses operating in the e-commerce space. With the rise of AI, cybercriminals are able to create increasingly sophisticated scams.' It said continually invested in cybersecurity technology, and incidents on the platform were rare. The message may say that your payment details need to be verified, or that there has been a problem with your card. It will try to make you panic by telling you your accommodation will be cancelled if you don't respond – it will probably give you a deadline to act by – usually a few hours away. There will be a link in the message for you to click on to give your card details. A separate scam also preying on would-be holidaymakers involves fake web pages which are used to trick people into downloading a malicious file that gives criminals full control of your device. The technology firm HP Wolf Security says scammers are emailing links to the pages and visitors are asked to accept cookies before they can see the full site – it is when they press 'accept' that the file downloads. A payment, or credit card details which the scammers say will just be used to pre-authorise or verify the card before your stay. They then charge it. Try not to panic about your holiday and don't respond until you've checked the message is genuine. advises: 'Always double-check the property's payment policies listed on the booking page or in your confirmation email. If there is no pre-payment policy or deposit requirement outlined, but you're asked to pay in advance to secure your booking, it is likely a scam.' If you are in doubt, contact customer service team and/or the accommodation provider directly. Be suspicious of any links you are sent. Genuine payments will be made on the app or website – you won't be sent to another site. Look out for common fraud tactics and giveaways. 'Scam messages often include urgent language and may contain spelling or grammar errors,' says. If you have put your card details into a site, call your card provider. You may need to block or cancel your card. also advises enabling two-factor authorisation on your account
Daily Record
8 hours ago
- Daily Record
'Fall from boat' on Loch Lomond as search underway for Scots ex-hotel boss
Alan Colquhoun, 83, is believed to have been with members of his family when he fell overboard. Divers are searching for the founder of a popular hotel after he fell from a boat on Loch Lomond. Alan Colquhoun, 83, is believed to have been with members of his family when he fell overboard on Thursday afternoon. Police and Coastguard have also been involved in the search for Mr Colquhoun, the dad-of-three who is the former owner of The Lodge on Loch Lomond Hotel. A source said the area has been swarming with police and search teams since the alarm was raised. They said: 'Divers have been out constantly every day since Thursday. There's police everywhere. 'They've never left the loch since the man went missing. 'It seems like they've been all over the place constantly since Thursday but still haven't been able to find him. 'A helicopter was also flying above the loch at one point. 'We haven't heard much about it but the search is still very much ongoing. 'We've also heard they're meant to be bringing in some kind of submarine in the morning to try and locate the man if he hasn't been found by then.' Join the Daily Record WhatsApp community! Get the latest news sent straight to your messages by joining our WhatsApp community today. You'll receive daily updates on breaking news as well as the top headlines across Scotland. No one will be able to see who is signed up and no one can send messages except the Daily Record team. All you have to do is click here if you're on mobile, select 'Join Community' and you're in! If you're on a desktop, simply scan the QR code above with your phone and click 'Join Community'. We also treat our community members to special offers, promotions, and adverts from us and our partners. If you don't like our community, you can check out any time you like. To leave our community click on the name at the top of your screen and choose 'exit group'. The four-star Lodge on the Loch Lomond Hotel was built by Mr Colquhoun and his wife Elizabeth on the site of a derelict farm and opened on his 50th birthday in 1992. It is now owned and run by his son Niall and his wife Ann. The hotel was still open for business yesterday despite the ongoing search. A member of staff who answered the phone at the hotel refused to comment when called by the Record. The Colquhoun family is believed to have gone out on the loch on a boat from Freedom Boat Club at nearby Ardlui Marina. A spokesman there said: 'We can't comment as an investigation is still ongoing. 'Nobody has been found yet.' A Police Scotland spokesperson said: 'Around 12.35pm on Thursday, 26 June, we received a report of an 83-year-old man entering the water in Loch Lomond near Isle of Inchlonaig. 'Police and partner agencies attended and extensive searches are ongoing. 'Local officers have been assisted by our Dive and Marine Unit and Air Support Unit. 'Officers are continuing to keep the man's family updated.'
Metro
8 hours ago
- Metro
Victims lose hundreds of thousands of pounds to Booking.com holiday scam
As temperatures heat up and many of us start planning summer holidays, there are fears about a booking scam that could leave you thousands of pounds out of pocket. It could be as simple as a message or email from the hotel you have just reserved a stay with, asking for a payment to secure a your holiday. And because it comes through and looks legitimate, you rush to pay or hand over credit card details. They are not going to the hotel, however, but to scammers who have taken over a hotel's account. This type of fraud can be costly. Between June 2023 and September 2024, Action Fraud received 532 reports of scams of this sort, with a total of £370,000 lost. They believe fraudsters are using phishing attacks against accommodation providers to take over their accounts. They then send unexpected in-app messages, emails, and WhatsApp messages to customers. This means the usual warning signs of a scam, such as odd text messages or emails, do not apply. Action Fraud do not believe these take-overs are linked to backend system or infrastructure. The most important thing is to check that any communication you receive is genuine. If you receive any urgent payment requests, you should immediately reach out to the Customer Service team to confirm. Be aware that no genuine transaction will ever require a customer to provide their credit card details by phone, email, or text message (including WhatsApp). Although Fraud Action says a hotel provider may reach out to request payment information, like credit card details. But you should always verify the authenticity of the message before providing any information. You should also treat any links you are sent with suspicion. Authentic payments won't take place on a site other than or their app. also advises: 'Always double-check the property's payment policies listed on the booking page or in your confirmation email. If there is no pre-payment policy or deposit requirement outlined, but you're asked to pay in advance to secure your booking, it is likely a scam.' There are other giveaways of fraud you can still look out for. These include grammar and spelling mistakes, as well as urgency. If you realise too late that you have typed financial details into a site, get in touch with your bank in case they need to block or cancel your card. The fraudsters send messages that are designed to make you panic. They tell you there has been a problem with your credit card, of your banking details need to be verified, adding that without a response your reservation will be cancelled. There might be a link in the message for you to provide your banking details. Holidaymakers should also be aware of another scam that employs fake web pages. People are then tricked into downloading a malicious file that gives criminals full control of your device. More Trending According to technology firm HP Wolf Security, links to these web pages come in email. When customers access the site and press 'accept' to cookie before they can view the webpage, thjat triggers the file to download. said: 'Unfortunately, there is an increasing number of online scams targeting many businesses operating in the e-commerce space. With the rise of AI, cybercriminals are able to create increasingly sophisticated scams.' They added that continue to invest in cybersecurity, and stressed incidents on the platform were rare. Get in touch with our news team by emailing us at webnews@ For more stories like this, check our news page. MORE: The 'ASAB' warning anyone going on a holiday in 2025 should know MORE: The way you pay council tax could change – here's how MORE: Free hand luggage is not the win you think it is
