Hotel Phishing
Messages posing as your hotel asking to 're-verify' card details, sometimes using real booking data.
Last reviewed: 1 June 2026
What this scam is
Hotel phishing impersonates a hotel you've booked with, asking you to 'verify' or 're-enter' your card details due to a 'payment problem'. Scammers sometimes reference genuine reservation details to look convincing.
How it works
Through a compromised booking platform, breached data, or guesswork, scammers message you (email, SMS, or chat) about a payment issue, linking to a fake page that captures your card and personal details.
Common red flags
- Urgent 'payment failed, re-verify now' message
- Link to a page that isn't the official hotel/platform domain
- Requests for full card number, CVV, or banking app codes
- Threats to cancel your booking unless you act fast
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Your reservation [reference] will be cancelled unless you re-verify your card within 2 hours: [fake link].
Payment methods used
- Card details harvested
Who is usually targeted
- People with upcoming hotel stays
- Booking-platform users
What to do immediately
- Do not click — contact the hotel/platform via its official app or number
- If you entered card details, call your bank immediately
- Report the message to the booking platform
Evidence to preserve
- The message and link
- Your genuine booking reference
- Screenshots
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
How can the message know my real booking details?
Scammers exploit breached booking-platform data or compromised hotel accounts. Real reservation details in a message do not prove it's genuine — always verify through the official app or phone number.