Got a message about your booking? How to spot phishing
An email, WhatsApp message, or text claiming to be from your hotel, airline, or Booking.com tells you there's "a problem with your reservation" and that you need to "confirm payment" or "update your details" by tapping a link. It has your real hotel name, your travel dates, even your booking number. It seems impossible for it to be fake. And yet, it's one of the fastest-growing travel scams.
The reason these messages are so convincing isn't magic: in several documented cases, scammers directly breached a booking platform's own messaging system (not your account or the hotel's), and sent notices with real booking details for other people's reservations. Having your correct information does NOT mean it's legitimate.
Signs it's phishing
It rushes you with a very short deadline
"You have 15 minutes to confirm or the booking will be cancelled" is the most repeated line in this type of scam. The urgency is designed so you don't stop to verify anything.
It asks you to pay outside the official channel
Wire transfer, a prepaid card, crypto, or a payment link that isn't the platform's official domain. No serious platform will ever ask you to "reconfirm payment" through a channel different from the one you used to book.
It arrives via WhatsApp or text, not through the booking channel
If you booked through Booking, Airbnb, or the airline's website, any real communication about your reservation should also show up inside your account on that platform, not rely solely on a WhatsApp message from a number you never saved.
The link doesn't go to the official domain
Hover over the link (without clicking) and check the full address. A domain with one letter swapped, an extra hyphen, or an unusual extension (.info, .xyz) is the clearest sign of all.
What to do if you get one of these messages
Don't tap any link in the message
Not even to "verify" or "cancel". Close the message.
Go directly to the platform by typing the address yourself
Open a new tab, type booking.com (or whichever platform applies), and check your reservation's real status from your account.
If in doubt, call the hotel or airline directly
Look up the phone number on Google Maps or the official website, never the one in the suspicious message.
A simpler way to check it
If you got a message like this and you're not sure, you can upload a screenshot to AuditorTravel along with your real confirmation: in seconds it tells you, with a simple traffic light (🟢 🟡 🔴), whether something doesn't add up between what the message says and your actual booking.
You pay once per trip, it's not a subscription you have to remember to cancel.
👉 Check your booking for free at auditortravel.com.
AuditorTravel is an automated informational tool; use it as a guide. The final decision is always yours.