Real Hotel Message vs Hotel Phishing Scam
Tell a genuine hotel/booking message from phishing that wants your card details.
Last reviewed: 1 June 2026
Genuine hotels and platforms don't need your full card details or codes via message links. Here's how they differ.
Side-by-side comparison
| Real hotel message | Hotel phishing | |
|---|---|---|
| Card details | Doesn't ask for CVV or codes by message | Asks to 're-verify' full card details/CVV |
| Links | Uses the official app/site | Links to a non-official domain |
| Pressure | No 'verify in 2 hours or lose booking' | Urgent cancellation threats |
| Channel | Visible in your official booking account | Only via email/SMS/chat link |
Common red flags
- Requests for full card details, CVV, or one-time codes
- Links to non-official domains
- Urgent cancellation threats
- Real booking details used to seem genuine
Verification steps
- Open the official app/site and check your booking
- Call the hotel/platform using the number on its official site
- Never enter CVV or codes from a message link
What not to do
- Don't click the link
- Don't enter card details or CVV
- Don't share one-time codes
A safe response
Verify any payment issue directly through the official app or phone number. Genuine providers don't need your CVV or codes via a message link.
Frequently asked questions
But the message had my real booking reference?
Scammers exploit breached booking data, so a real reference doesn't prove a message is genuine. Always verify through the official app or phone number.