Just received a suspicious e-mail or message asking for you to confirm an upcoming hotel room booking or to verify your payment details? You are not alone.
At Repair IT! Tech, we’re seeing a massive rise in sophisticated phishing scams targeting holidaymakers. One of the most prevalent current threats involves the fraudulent website bookingconfirm.org (and similar variations like bookingconfirm.icu or https://www.google.com/search?q=booking.confirm-id.com).
Here at Repair IT! Tech, we are noticing a huge increase in highly sophisticated phishing scams targeting holidaymakers. One of the more prevalent threats involves the fraudulent website bookingconfirm.org (and other variations like bookingconfirm.ai)
Here is everything you need to know about this scam, how to spot it, and what to do if you have been targeted.
How the bookingconfirm.org Scam Works
The scam is incredibly deceptive because it often targets people who have legitimately booked a hotel recently through legitimate platforms.
Cybercriminals manage to compromise the login credentials of legitimate hotels. Once inside the hotel system, they message guests directly through the official booking app or via WhatsApp. The message usually claims that there is an issue with your payment, that your card has been declined, or asks you to please verify your booking immediately or your reservation will be cancelled.
They then provide a link to a fake website such as bookingconfirm.org. Because the message often includes your real name, reservation dates, and hotel name, it is incredibly easy to fall for.
What Happens if You Click the Link?
If you click the link, you will be taken to a highly convincing fake website designed to look exactly like a legitimate travel platform. The site will ask you to re enter your credit card details to secure your booking.
If you type in your details, the scammers will instantly steal your financial information and attempt to drain your account.
How to Spot the Scam
Check the URL
Legitimate booking platforms will never redirect you to a completely different, unverified domain like bookingconfirm.org.
Do not Panic Pay
Scammers rely on urgency. If an email or message says you must pay within 24 hours or lose your room, it is highly likely a scam.
Verify Independently
If you receive a message about a payment failure, do not click the link. Log directly into your official booking app or call the hotel directly using a phone number you found on a search engine, not the one in the message, to ask if there is an issue.
What to Do If You Have Fallen for It
Contact your bank immediately
Freeze your credit or debit card and report the fraudulent transaction.
Change your passwords
Update the passwords for your email and booking accounts.
Run an antivirus scan
Sometimes clicking malicious links can download malware onto your device.
Need Help Securing Your Devices?
If you are worried that you have clicked a malicious link and compromised your PC, laptop, or phone, Repair IT Tech is here to help. We offer professional virus removal, data recovery, and cybersecurity health checks to keep you and your business safe online.
Call us today on 01978 437 436 or drop us an email at info@repairittech.co.uk.
Scam websites come in many forms. As well as fake booking confirmations, businesses are increasingly being targeted by domain-slamming scams designed to trick them into paying for unnecessary domain services.
