Booking fraud via WhatsApp: Fake message requests data confirmation
Summary
Why is this warning issued?
This warning was included because it is based on a report from Watchlist Internet. It is intended to protect other users from this fraud scheme. The assessed risk is elevated.
How the scam works
- Criminals gain access to the booking or communication systems of accommodations.
- They steal real guest data such as names, stay dates, email addresses, and mobile phone numbers.
- They contact the guests via WhatsApp and pose as the booked accommodation (in the case: operator of a chalet near Hallstatt).
- They claim that the reservation has not yet been confirmed and must be verified via a 'secure form'.
- They send a link to a fake form page that belongs neither to the accommodation nor to Booking.com.
- Personal data and credit card information are requested there – anyone who enters them hands them directly to the criminals.
How to recognise it
- You unexpectedly receive a WhatsApp message from your booked accommodation asking you to confirm or add data.
- The message contains a link to a form on a domain that belongs neither to the accommodation nor to Booking.com (example from the case: form.reception-en8769.com).
- The message threatens cancellation if you do not act immediately.
- The message is written in a different language than the original booking (in the described case: an English message for an Austrian accommodation).
- The sender uses a WhatsApp business account – this appears legitimate but is no proof of authenticity.
- The message contains real booking data such as name and stay dates, making it deceptively authentic-looking.
- Prize without participation or 'free' offer with data request
- Advance payment demanded for 'fees/taxes'
How to protect yourself
- Do not click on links in unexpected confirmation requests – no matter how genuine the message appears.
- Only contact your accommodation through the official contact details from your booking confirmation, never via numbers from external messages.
- Log in directly to your Booking.com account and check whether any action is actually required.
- If you have already entered data or made a payment: contact your bank or payment service provider immediately to stop payments.
- Inform the actual accommodation about this – their system is likely compromised.
- File a police report and block the sender in WhatsApp.
What you should never do
- Do not click on the link in the WhatsApp message.
- Do not enter any personal data or credit card information on such form pages.
- Do not reply to the message and do not use any contact details given there.
- Do not pay any allegedly outstanding amounts without first checking officially with the accommodation.
- Do not ignore the incident if you have already entered data – act quickly.
Frequently asked questions
Where did the fraudsters get my booking data?
According to Watchlist Internet, the criminals gained access to the accommodation's booking or communication systems and thus captured real names, stay dates, and contact details of the guests.
Do I need to respond to the message or pay anything?
No. A reputable accommodation does not request re-confirmation via an external WhatsApp link. Check your booking directly with Booking.com or contact the accommodation through the official contact details from your booking confirmation.
I have already entered my data or credit card information – what should I do?
Contact your bank or payment service provider immediately to stop possible payments, file a police report, and inform the actual accommodation. Seek advice from your consumer protection center.
Is a WhatsApp business account a sign of authenticity?
No. A business account can also be misused by criminals and, according to Watchlist Internet, is not a reliable indicator of authenticity.
Why was the message in English even though the accommodation is in Austria?
In the described case, the accommodation was Austrian, but the message was entirely in English. Such a linguistic inconsistency compared to the booking communication is a clear warning sign of a fraud attempt.
Affected data
Comments
No comments yet. Registered users can share their experiences.
Related warnings
- Falsche Rechnungen und Chatpartner bei ZumDaten, MichVerlieben & Co.
- PDF-Abo-Falle: Wenn aus 99 Cent ein teures Abo wird
- Verschreibungspflichtige Medikamente ohne Rezept? Vorsicht vor Fake-Apotheken!
- Eintrag wider Willen: Wenn Unternehmen ungefragt auf dubiosen Portalen landen
- Spotify: "Ihr Zugang läuft ab"
- Achtung, Gamer! So stehlen Kriminelle Accounts
Original source
Find more information in the original source.
Watchlist Internet ↗Update history
- 22/07/2026Description updated
- 17/07/2026Warning added from an official source