Skip to content
Scammers Exploit Booking Platforms for Phishing Attacks

Scammers Exploit Booking Platforms for Phishing Attacks

First seen 3 Nov 2026, 17:16 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 18:16 UTC
  • •Scammers use over 1,200 look-alike domains to harvest payment information.
  • •Booking.com is under investigation for its role in facilitating phishing scams.
  • •Compromised accounts allow criminals to send convincing fraudulent messages.

Akamai's Fraud and Abuse Report reveals that scammers are rapidly rebuilding fake shopping and ticketing sites following takedowns. These scams utilize over 1,200 look-alike domains to harvest sensitive payment information. A new investigation by the European Commission into Booking.com focuses on its handling of fraudulent accommodation listings and phishing attempts targeting travelers. Criminals are reportedly accessing genuine booking details to send convincing payment requests through Booking.com’s messaging system. The investigation, announced on October 21, 2026, aims to assess whether Booking.com has sufficient safeguards against these threats. The ongoing issue highlights the vulnerabilities in third-party supplier networks and the need for stronger authentication measures to protect customer data.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-21
European Commission announces investigation into Booking.com
The investigation will assess Booking.com's measures against fraudulent listings and phishing attacks targeting travelers.
Teiss
2026-10-30
Akamai reports on rapid rebuilding of scam sites
Akamai's report reveals scammers can replace blocked sites within hours using shared infrastructure.
Helpnetsecurity

More articles in this cluster (2)

Extracted Entities (11)

1 / 4

Common questions

What should travelers do to protect themselves?
Travelers should verify payment requests directly with their accommodation providers and avoid sharing sensitive information unless certain of legitimacy.
How can businesses enhance security against these scams?
Businesses should implement stronger authentication measures for partner accounts and monitor for suspicious messaging activity.
What are the signs of a phishing attempt?
Signs include unexpected requests for payment information, messages that seem too familiar, and communications through unofficial channels.