It started with a simple post in an Israeli Facebook group that discusses vacation methods and locations. “Something bad is happening at Booking,” the traveler wrote. What followed was an outpouring of replies—from tourists, families, and seasoned travelers—many sharing the same alarming experience: they booked a place through Booking.com, only to find out too late they’d been scammed.
For some, it meant arriving to discover their vacation rental didn’t exist. For others, it was thousands of shekels lost through phishing links or payment requests made outside the secure platform. The most common tactic? Fake listings, fraudulent messages through Booking’s internal chat system, and suspicious hosts asking for money transfers or credit card details directly.
“I booked an apartment and then got a message asking for my card info through a link,” said Sigal Ben-Muha-Fahima. “It felt off, so I canceled. Later, I found several reviews saying the listing was a scam. But Booking still kept it up.”
“We showed up and the place had been shut for six months”
Tal Edelman shared her own shock: “We booked a place in Israel a year ago, arrived, and it had been closed for six months. Booking didn’t respond, and we had to scramble for another place. Thankfully, Visa refunded us, but it was stressful. I haven’t used the site since.”
Get the Ynetnews app on your smartphone: Google Play: https://bit.ly/4eJ37pE | Apple App Store: https://bit.ly/3ZL7iNv
Veteran traveler Oded Shenhav added that he’d been scammed twice—in Japan and the U.S.—despite using Booking for years without issue. “Each time, Booking had no record of my reservation. The credit card company saved me.”
The source of the problem, it seems, may be Booking.com’s messaging system, which allows direct communication between guests and hosts. While convenient, it has become a gateway for cybercriminals. “Never click links in the Booking chat or send payment info there,” one commenter warned. “Scammers know how to make it look official.”
A Madrid disaster
One of the most troubling stories came from a couple who traveled to Madrid with seven relatives in May. They prepaid €4,000 for an eight-night stay. Then came an email requesting an additional €2,000 deposit, which Booking allegedly approved.
“We contacted Booking and they confirmed it was okay, so we sent the money,” the wife said. “But they never gave us an address. We landed in Madrid with nowhere to go. Booking’s rep couldn’t reach the host. We had to find a last-minute hotel—paying again out of pocket. We called Booking over and over. No help. Eventually, we got a partial refund, but no real explanation.”
Customers feel abandoned
Frustrated users say problematic listings stay online even after being flagged, and real-time support is practically nonexistent. “You’re on your own,” one traveler said.
Yoav Keren, CEO of the cybersecurity firm BrandShield, told Ynet the problem isn’t limited to Booking—it’s part of a wider wave of fraud hitting official travel platforms.
“People assume sites like Booking or Airbnb are secure, but hackers now target legitimate listings and trick users into paying outside the system,” Keren explained. “We’ve seen impersonation attempts increase across airlines, hotels, and travel agencies. Brands must take the lead by investing in two-factor authentication and fraud detection systems.”
According to BrandShield, fake websites mimicking top travel brands jumped 33% in one year. Among the worst hit:
- American Airlines: +82%
- Delta: +50%
- Airbnb: +32%
- Hilton: +59%
- Marriott: +10%
Booking’s response
In a statement, Booking.com said: “There has been no breach of Booking’s systems. However, a small number of partners were targeted through phishing after their systems were compromised. We’ve taken steps to reduce risks and are continuing to invest in security.”
Still, travelers are sounding the alarm. Whether you’re planning a quiet weekend escape or a family trip abroad, be cautious: verify your accommodations, avoid paying outside the official system, and report anything suspicious.
Because while the journey should be carefree, the booking process shouldn’t leave you with regrets.