Warning: a convincing Booking.com scam is circulating – here’s how to stay safe

The holiday season is here and millions of people are using Booking.com to plan trips and book accommodation.

But be careful, as a very convincing scam is doing the rounds and it’s already cost hundreds of victims thousands of pounds.

Between June 2023 and September 2024, Action Fraud received 532 reports of this scam, with £370,000 lost in total.

What’s the Booking.com scam?

Scammers are sending fake messages that look like they’re from Booking.com, claiming there’s a problem with your payment or card details.

Here’s how it usually works:

• You receive a message (email or SMS) saying your payment details need to be verified, or your booking will be cancelled.
• The message sounds urgent and may give you only a few hours to respond.
• You’re asked to click a link and enter your credit card information to ‘verify’ or ‘pre-authorise’ your stay.
• Once entered, your card is charged by the scammers.

There’s also a separate version of the scam involving fake Booking.com web pages. These pages:

• Trick you into downloading a malicious file (often disguised as a cookie consent button).
• Once downloaded, the file can give hackers full access to your device.

How to spot the Booking.com scam and stay safe

Here’s how to protect yourself and avoid getting tricked:

Know Booking.com’s payment policies

“Always double-check the property’s payment policies listed on the booking page or in your confirmation email”, says Booking.com.

If your booking doesn’t mention pre-payment or deposits, but you're asked to pay in advance, it’s likely a scam.

Only pay on the official Booking.com site or app

Never enter your payment details on a different website, even if the message looks legitimate.

Be wary of urgency and bad grammar

Scam messages often sound panicky and contain spelling or grammar errors. Don’t fall for pressure tactics.

Enable two-factor authentication

Protect your account with two-factor authentication (2FA). It adds an extra layer of security.

What to do if you’ve been scammed?

If you think you’ve been caught out by this scam, act fast:

Report it to Action Fraud

You can report the incident online or by calling 0300 123 2040.

Contact your bank immediately

Let your bank or card provider know. They may be able to block your card or reverse the charges.

Inform Booking.com

Contact Booking.com’s customer service to let them know what happened. They may be able to help or take action on their end.

Scammers are getting smarter, especially during busy travel seasons. Before you act on any suspicious message, you should always pause and confirm with the official provider before taking action.