July 27, 2026, 10:22 am | Read time: 2 minutes
A message from the booked hotel initially seems harmless. However, behind alleged payment issues lies a particularly sophisticated scam currently based on real booking data.
When the Hotel Suddenly Demands Money
Anyone receiving a message from their hotel shortly before vacation should take a close look. According to the IT magazine “c’t”, scammers are currently sending deceptively real payment requests to travelers. The messages are usually sent via messenger and claim that a previous payment has failed. To secure the reservation, the amount must be transferred again.
Particularly dangerous: The criminals often have real booking information. Guest names, travel dates, or phone numbers match the actual data. This creates the impression that the message genuinely comes from the hotel or booking platform.
Also of interest: Scams in the Name of Booking.com
New TikTok Scam Targets User Accounts
The Truth Behind the Aldi Meat Fraud on Facebook
How the Perpetrators Obtain the Data
The scam doesn’t start with the travelers but with the hotels. According to “c’t,” attackers gain access to hotel accounts through phishing attacks, which are used to manage bookings on platforms like Booking.com. These systems contain numerous personal guest details.
With the stolen data, the perpetrators can craft credible messages and specifically contact travelers. The payment links in the messages lead to fake websites that often closely resemble real payment services. There, users are prompted to enter their credit card information–the data, however, goes directly to the scammers.
Why the Timing Is No Coincidence
The messages are often sent shortly before the trip begins. This is when many people are deeply engaged with their travel plans, checking reservations, or organizing last-minute details. In this situation, the likelihood increases that an apparently urgent payment request will be followed without thorough scrutiny.
Experts therefore advise treating payment requests via messenger with skepticism. If unsure, one should verify the booking exclusively through the official app or website of the platform and contact the hotel directly using a self-researched phone number for inquiries. If credit card information has already been entered on a suspicious site, the card should be immediately blocked and the incident reported to the police.