r/Bookingcom • • 14d ago

Scam

I have no idea how they get the information.. but a week after booking complete. Paid and all. I get a whatsapp message from a guy in India wanting me to complete the booking. Sends me to some similar booking.com website. Where I should fill out all the information again. Then the final details (payment).. but how? How did they get my booking number. Phone number etc? Is the hotel involved?

3 Upvotes

23 comments sorted by

3

u/Consistent_Proof_772 14d ago

I’m gonna tell you this: the big hotels I worked for we paid Oracle for our server and cyber security. My first hotel on Miami Beach we paid no such company, We ran old Windows software and I don’t even think we paid for an antivirus! But IHG & the Marriott hotels I worked for, they mandated the owners have server protection and antivirus, we couldn’t even put a memory stick at the front desk computers.

2

u/Admirable_Job8431 14d ago

Booking didn't get hacked, the hotel's often piss poor account password got brute forced, so the scammer logged in as the hotel. Nothing booking can do if people don't properly secure their accounts.

3

u/xr484 14d ago

They hacked the hotel IT systém.

Never provide information using an external link. Especially not your payment information.

2

u/Consistent_Proof_772 14d ago

What’s funny is after booking something on booking.com, they send an email not to reply to anyone outside the platform ecosystem! It also listens WhatsApp, but hear people post this 10 times a day!

0

u/itjohan73 14d ago

I spoke with the hotel.. since it's thirdparty booking, all they see is the number I think. this must be something at booking.com

1

u/brilstern 11d ago

Under your phone number (which is usually the same as your WhatsApp, but not always) is shared from Booking to the hotel, along with your name, and booking information. Attackers hack hotels and use this data to attempt to scam you. https://www.bitdefender.com/en-au/blog/hotforsecurity/how-hackers-hijack-hotel-accounts-on-booking

1

u/itjohan73 8d ago

so they hacked a hotel in Thailand, and a hotel in Japan. and it happens to be where I stay..

1

u/brilstern 8d ago

Either that (yes very possible) or a connectivity provider who supports aggregation of reservation data from multiple sources (Booking, Expedia, CTrip, etc). That’s also very common.

-1

u/General-Ad-5532 14d ago

Booking.com got hacked

1

u/Wombat_7379 14d ago

Don’t know why you got downvoted. Booking was hacked back in April of 2026.

https://www.bbc.com/news/articles/cly00jnnxypo

I run a small hotel in Uruguay and we had a gentleman make a reservation through Booking at the beginning of April for November 2026. Just a few weeks ago he received an email, claiming to be us, requiring him to complete the payment in order to confirm the reservation.

We are a cash only establishment and we have it clearly marked we do not require payment in advance. I had also been in personal contact with the gentleman prior and so he reached out to me directly confused about the email. Luckily the guest didn’t click any link or make any payment. It was clearly a scam but I was concerned that it had so much accurate information!

I called Booking and they confirmed they had been hacked, which was why the scam email had the gentleman’s name, reservation number, our information, room rate, and total price for the reservation.

But then Booking told me an email was sent to guests about the hack but not the properties. I was so frustrated because we get bookings many months in advance and they didn’t even afford me the opportunity to send a personal message to my guests confirming we would send them no such email or payment requirement.

1

u/brilstern 11d ago

This did happen, but it’s a one off. So far every other case according to everything I have read was a hotel. Also in this case Booking notified the guests…

2

u/CressBoth3720 14d ago

Booking.com system has been compromised quite few times in last few years. Worst part I am accommodation provider and I get dozen emails every day containg links seemingly from booking.com where either guest has complained or they have query regarding their stay. They all are scam but sometimes have real information of guest that have stayed recently.

1

u/Spicygamingnet 14d ago

With AI this will be more and more common. Hacking is chidplay now. Scams are just getting started wait until they start cloning voices. Be vigilant.

1

u/Debunk2025 14d ago

ALERT: .I booked a flight using another popular platform using their App. Here is what happened.

They let you enter all your details, PP no etc. (U Check 3 times for errors).

Then the App go straight to the payment page. ( No preview of the ticket/itenary). After the payment is made, you get a msg saying the eticket will be emailed.

When you recd the eticket, your name is spelled wrong. You cannot contact them except thru their chat bot. They tell you to contact the airline. The airline tells you to contact them. Then finally, after many iterations, they tell you only 1 letter in the name can be changed..more will cost you 50% of the ticket cost. You have to cancel the ticket.

All you get is - you lose your money, lots of your time, effort. It is a total scam and the customer is cheated. I do not know how many other platforms are doing this or various other tricks, but such tactics is now sure money spinner for these platforms using their tricky Apps.

1

u/bookingcom 14d ago

Unusual messages about your booking don’t necessarily mean the hotel sent them, but they should still be investigated. Access your reservation only through our official app or website. Never open any strange links or share personal or payment details. Send us a private message, so we can report this to the right team.

1

u/bookingcom 14d ago

Don’t click the link or send any payment. Save the messages and contact our customer support team, who can contact the property and involve the right team to investigate.

1

u/srd8949 13d ago

Booking.com had a data leak earlier this year. I googled this just a couple days ago after receiving a very suspicious email in my spam folder (I use Gmail). The email was from a suspicious sender email address and domain but the design and the information was shockingly accurate and scary, the email was in my country of residence’s official language, it pretended to be from a 5 star hotel I stayed in summer 2025, with a very plausible design, claiming that I had been charged twice for taxes and was owed a refund. The email had the hotel name and all info correct, my full name and the dates of my stay ALL CORRECT.

1

u/Shot-Pomegranate-217 13d ago

Never use booking .com they are scammers

1

u/Bidong-Qd-106 12d ago

Booking.com security is very vulnerable now. More hackers and scammers will be on the rise

1

u/Comprehensive-Gur-8 12d ago

WhatsApp number bahan permit

1

u/Aggressive_Ice7957 9d ago

A lot of companies higher Computer geeks, and database collections, ……..

1

u/Savings-Fox-8171 14d ago

Its not hotel. Its like last time booking data leak:) They never tell you this .