Booking.com Scams: How to Spot Fake Reservations and Charges

Despite constant warnings on the news, the phenomenon of fraud on travel platforms continues to claim victims. Many tourists wrongly blame the portals, but the reality is quite different: the servers of Booking, Expedia, or Airbnb are secure. The real weak point is identity theft (Account Takeover) against accommodation facilities.
As a former member of the Police Force, I want to provide you with the exact tools to defuse this threat, explaining how cybercriminals operate and what the golden rules are to protect your savings.
🕵️♂️ The Anatomy of the Scam: Deceiving the Hotelier
It all starts with bait. Cybercriminals send an email to the hotelier pretending to be clients with fake emergencies, inviting them to download an attachment (for example, a fake medical certificate for a severe allergy). By clicking on the file, the manager unknowingly installs malware that hands over their computer passwords to the hackers. From that moment, the scammers have full access to the property's control panel.
🚨 The Trap for the Tourist: Anxiety and Fake Charges
Once they gain access, the criminals act subversively from the inside. They read the guests' names and send messages directly through the platform's official chat system.
The message is designed to generate panic and urgency: you are told that your credit card payment has failed and that, to avoid immediate cancellation of your vacation, you must make a wire transfer to a bank account (almost always foreign and in the name of a front man). The tourist, trusting the official App from which the message arrives, makes the transfer and inexorably loses their money.
🛡️ The Practical Guide to Defend Yourself
The main defense remains the customer's awareness:
- No wire transfer requested via chat: Official portals never ask for wire transfers. If funds are missing, the system informs you of the error and invites you to update your credit card exclusively within your secure personal area.
- Verify the sender and the site: Always check the real email address and verify that the site connection is secure.
- Direct phone contact: When in doubt, exit the App, search for the hotel's number on Google, and call the reception.
- Further reading: For an even more detailed technical analysis, I invite you to consult our first report on how to recognize the Fake Booking and Airbnb Messages Scam.
💎 The Ultimate Solution: Video Calls and Direct Booking
Do you want absolute proof before sending your money? Ask for a live WhatsApp video call.
Scammers steal photos from the internet, but they don't have the keys to the house. An honest owner, on the other hand, will be happy to give you a virtual tour of the property. We at Villa Malvasio always do this!
Booking directly from our official website is not only the perfect digital shield, but it guarantees you two huge advantages:
- Net savings: Access our special direct rate, without portal commissions.
- BeSafe Protection: You can choose our exclusive BeSafe Insured Rate, which secures your funds by refunding you in case of unforeseen events or cancellations.

