Cybercrime Southeast Europe Newsletter No. 99

Booked accommodation through Booking.com? Be careful – the scam may come after the reservation

In recent days, reports have emerged about a security incident involving Booking.com, creating an increased risk of data misuse and targeted scams against users.

Unlike standard phishing messages that are sent randomly, the risk here is more serious for one reason – scammers may have access to real reservation-related information.

This means that a message you receive may contain accurate details such as the name of the accommodation, your travel dates, location, or other booking information, making it appear completely legitimate.

That is exactly why these scams can be far more convincing than ordinary phishing attempts.

The most common scenario looks like this: after completing a reservation, a user receives a message, email, or notification that appears to come from the accommodation provider or the platform itself, claiming that an additional confirmation, card verification, or urgent payment is required in order to avoid cancellation of the booking.

In reality, the goal remains the same – obtaining your card details or tricking you into authorizing an unauthorized payment.

It is especially important to understand that scams today often do not begin with fake offers, but through the misuse of legitimate services you have already used.

That is precisely why people are much more likely to trust such messages.

If you have recently used Booking.com or entered your payment card details on the platform, it is important to monitor your transactions carefully, verify all communication exclusively through the official app or platform, and never enter your card details through links sent via messages or emails.

If you notice any suspicious activity, the most important step is to contact your bank immediately and, if necessary, block your card.

The point is simple: using a legitimate platform does not mean you cannot become a target of fraud.

Today, scammers increasingly rely on the trust you already have in well-known services in order to gain access to your personal and financial information.

That is why it is essential to verify every urgent message – even when it looks completely real.

Your DefendMe Team