Booking.com - Beware of Scam texts

[jubileewonders]

We are travelling to Europe over half term and booked one of our hotels via booking.com as it was cheaper than on the hotels website. I paid in full at the time of booking and incidentally was looking at my credit card statement this morning and saw it was there. Anyway I got a text late morning that was a bit unclear and wanted verification of something, suspecting a scam so i deleted it. I then got another text which I deleted again followed by another. Concerned as it referenced the hotel chain we’re staying in, I clicked on the link and it looked like booking.com - it had the exact details
of our stay and asked for confirmation of the email address and arrival time. It then asked for the are details to be entered for verification. At this point I was convinced it was a scam especially as there was no padlock on the link. I messaged the chat and told them I was reporting this as a scam. Shortly after I got a WhatsApp message from Gulf Shop SA with pictures of my alleged booking be cancelled an option to verify my details. I blocked the contact. I had a look on line after and it appears that this is quite common. Just wanted to warn people as it’s quite convincing. I’m usually alive to these sorts of things straight away and so disappointed in myself for clicking the link. I reported it to booking.com but not heard anything yet. Will also be reporting to action fraud. It’s been reported in the press as well https://www.bbc.co.uk/news/articles/cq6zr59m49vo.amp Anyway hope this is useful for people.

I reported a similar suspicious communication to booking.com last week & have heard nothing back.

Thanks for posting, I often book through booking.com so good to know

Unfortunately this type of scam works all too well and many people have been defrauded. You were fortunate in that you realised what this was i.e. a scam and did not proceed.

Both messages you received were actually quite poorly worded (and the reference to push notification in the second should ring alarm bells) but it is all too easy to be fooled by such particularly if there is perceived time pressure to act.

The following is from Action Fraud:
The specific account takeovers are likely to be the result of a targeted phishing attack against the hotel or accommodation provider, and not Booking.com’s backend system or infrastructure.
Adam Mercer, Deputy Head of Action Fraud, said:
“With more than 500 reports made to Action Fraud, those who have booked a holiday on the Booking.com platform should stay alert to any unexpected emails or messages from a hotel using the Booking.com platform, as their account could have been taken over by a criminal.
“If you receive an unexpected request from a hotel’s account you booked with using Booking.com, asking for bank details or credit card details, it could be a fraudster trying to trick you into parting ways with your money. Contact Booking.com or the organisation directly if you’re unsure.

"Remember to report any suspicious emails by forwarding it to [email protected], or if you receive a fraudulent text message, you can forward it to 7726.”

How can you protect yourself?
Booking.com and Action Fraud are providing the following advice on how to spot signs of fraud and protect your Booking.com account:

• No legitimate Booking.com transaction will ever require a customer to provide their credit card details by phone, email, or text message (including WhatsApp).
• Sometimes a hotel provider will manage their own payment and may reach out to request payment information, like credit card details – before providing any information, always verify the authenticity of communication between yourself and the hotel’s account.
• If you receive any urgent payment requests that require immediate attention, like a booking cancellation, immediately reach out to the Booking.com Customer Service team via the details on the official Booking.com website and/or app to confirm.
• Any payment requests that do not match the information in the original booking confirmation should also be double checked and confirmed with Booking.com Customer Service before proceeding.
• Any messages purporting to be from Booking.com that contain instructions to follow links and/or open/download files should be treated with caution.
• If you have any doubts about a message, contact Booking.com directly. Don’t use the numbers or address in the suspicious message and use the details from their official website.

I had a very bad experience with booking.com.
They are not UK based, there is no protection & they just don't want to know when things go wrong.