B
Booking.com Phishing Alerts
Travel reservation scams using real booking details to steal card numbers and credentials from NZ travellers.
Official indicators
B
Booking.com<noreply@booking.com>
To: you@example.com
For your security, please Go to Booking.com to complete this action.
Original URL: https://www.booking.com. Click or tap if you trust this link.
What real Booking.com messages look like
- All legitimate emails come from an address ending in @booking.com (including subdomains like @mailer.booking.com and @property.booking.com)
- Booking.com will never ask you to re-enter your payment details via a link in an email
- Real booking confirmations and itineraries are always accessible inside the Booking.com app — if in doubt, log in directly
- Any payment requests go through the Booking.com platform itself, never through an external link or third-party page
- Booking.com addresses you by your full name in all legitimate communications
Common spoof patterns
- Urgent messages claiming "your reservation is at risk" or "payment failed", using your real booking reference, dates and hotel name to demand card re-verification via a link
- Compromised accommodation partner accounts sending fake payment requests that appear to come from your actual hotel through the Booking.com messaging system
- Fake cancellation notices with links to lookalike payment pages designed to harvest card details and CVV
- WhatsApp or SMS messages impersonating Booking.com or the accommodation, demanding immediate re-payment before check-in
- Look-alike domains with subtle typos (e.g. b00king.com, booking-secure.com) used in phishing links