Scammers Target Tourists with Reservation Hijacking Scheme

• •Tourists are losing money to reservation hijacking scams.
• •Scammers impersonate hotels and use phishing tactics to steal bank details.
• •The scheme exploits vulnerabilities in hotel booking systems.

Tourists have reported losing hundreds of euros due to a sophisticated scam involving fake messages from hotels. The scheme, known as reservation hijacking, begins with a legitimate booking on platforms like Booking.com. Victims receive messages claiming payment issues, prompting them to verify bank details via a fraudulent link. Scammers often impersonate hotel staff and utilize internal chat systems to appear credible. This method has been linked to a phishing attack targeting hotel employees, which was detailed by Microsoft in March 2025. The phishing emails trick hotel staff into revealing sensitive information, enabling scammers to access customer data. Reports indicate that individuals have lost substantial amounts, with some cases documented in The Guardian in June 2025. The ongoing nature of these scams poses a significant risk to travelers, especially during peak holiday seasons.