Phishing Scam on Booking.com Costs UK Traveler Over One Thousand Eight Hundred Euros– How to Protect Yourself

Image generated with Ai

A recent phishing scam has left a British holidaymaker, Steve Alderson from Newbury, Berkshire, out of pocket by over €1,800 after booking accommodation in Portugal through the online travel platform Booking.com. The incident, which was discovered only after the payment was made and the booking unexpectedly cancelled, highlights the increasing threat of online fraud within the travel industry.

Alderson, who works in IT, thought the booking process seemed legitimate, with a communication from the property asking for payment. However, after completing the transaction via WhatsApp, he received a notification from Booking.com indicating that his reservation had been cancelled. This prompted Alderson to realize that something was wrong, but unfortunately, the scam had already taken its toll.

A Familiar Scam on a Trusted Platform

Booking.com, one of the largest online travel agencies, acknowledged that phishing attacks targeting users are not uncommon and assured the public that cybersecurity remains a top priority for the company. However, the platform also emphasized that customers should always verify payment requests directly through the official site or app to avoid falling victim to scams.

According to the company, when a scam like this happens, the first step for victims is to raise a dispute with their bank. If that attempt proves unsuccessful, Booking.com stated that it would support users with a refund, provided the required documentation is submitted.

Alderson stated that he had reached out to the platform for assistance but encountered difficulties. After sharing the accommodation booking reference, he reported that the call was abruptly disconnected. Despite contacting Booking.com twice, Alderson has yet to receive a satisfactory response and is now pursuing the issue with his bank.

Understanding How the Scam Works

This type of phishing scam typically works by manipulating a trusted communication method. In Alderson’s case, the scammer used the legitimate Booking.com platform to initiate the booking. After Alderson made the reservation, he was redirected to WhatsApp, where he made the payment.

Cybersecurity expert Rafe Pilling from Sophos explained that many hotels initially fall victim to phishing attacks when cybercriminals impersonate hotel staff or use malware to steal login credentials from hotel systems. This allows them to access legitimate platforms like Booking.com and reach out to customers as though they were the hotel, asking for payments or personal information.

Pilling also warned that these scams often create a sense of urgency, prompting victims to act quickly. This emotional trigger causes many travelers to pay up without double-checking the legitimacy of the request.

Booking.com’s Advice to Prevent Phishing

In response to the rising phishing incidents, Booking.com has reiterated its policy that the platform will never ask customers to provide payment information via email, text messages, or phone. The company advises travelers to always check the payment policy details in their booking confirmation to ensure any communication is legitimate.

The company stressed that payment details should only be shared through the Booking.com website or app. If you ever receive a suspicious request, it is recommended to contact customer service directly via the platform’s official channels.

The Business Impact of Phishing Scams

For business travelers, phishing scams represent a serious risk, not only for personal finances but also for corporate data. While Booking.com is a trusted platform for booking accommodation, companies should remind employees to always verify booking confirmations and payment requests, especially if they involve non-secure platforms like WhatsApp or unfamiliar email addresses.

For tourists, scams like this can turn an exciting trip into a financial nightmare. Travelers need to be extra cautious when booking through third-party platforms, especially if the booking involves unfamiliar methods of payment. Ensuring that payments are only made through official websites can greatly reduce the chances of falling victim to fraud.

Quick Tips for Avoiding Phishing Scams

1. Use Secure Platforms: Only make payments through trusted websites like Booking.com and avoid external payment links.
2. Verify Payment Requests: If a property or booking site asks for a payment through WhatsApp or email, contact the platform directly to confirm its legitimacy.
3. Look for Red Flags: Be wary of any urgent requests for money or unusual payment methods. Scammers often create a sense of urgency to pressure you into paying.
4. Contact Customer Service: If you are unsure about the legitimacy of a payment request, contact Booking.com customer service or the accommodation provider directly.
5. Check Booking Confirmation: Always double-check payment policies and booking confirmation details to ensure the request matches the terms agreed upon.

Key Takeaways

• Phishing Scams: The rise of phishing scams targeting travelers through platforms like Booking.com highlights the growing risks for holidaymakers.
• Booking.com Response: The platform is working to address these issues but advises travelers to use caution and confirm payment requests directly through the official website or app.
• Business and Tourism Risks: Phishing scams pose a threat to both business and leisure travelers, making it essential to remain vigilant and take preventive measures.
• Refund Process: If you’ve fallen victim to a scam, immediately raise a dispute with your bank and contact the platform for a refund once you have the required documentation.