Booking hotels online is a quick and easy way to arrange accommodation for your next trip. With just a few clicks, you can compare various options to find ones that fit your budget and needs. But while online booking makes travel planning convenient, it also comes with risks.
Scammers often target traveler’s who book hotels online by offering fake deals. These scams include fake ads that offer seemingly incredible deals but lead to fraudulent websites. Falling for these can leave you without a booking, out of pocket, and at risk of identity theft.
Learn how to recognise fake deals, avoid scam ads, and safely book hotels online in our guide.
Common Online Travel Scams
Fake hotel deals are more common than many people realise. In 2024, the popular booking platform Booking.com reported a sharp increase in travel scams. Cases rocketed by 500-900% in 18 months, driven by scammers using advanced AI to dupe consumers.
Some of the most frequent scams include:
“Too-Good-To-Be-True” Deals
Scammers offer fake luxury accommodation at unbelievably low prices, tricking you into thinking you’ve found a great deal. Here’s how these scams work:
- Fake listings: Scammers create fake ads on travel platforms for properties that don’t exist or don’t belong to them. Payments are then requested upfront using untraceable methods, such as wire transfers or cryptocurrency. Once the money is sent, the scammer vanishes, leaving you without a booking.
- Hidden fees or sudden cancellations: Some scammers attract you with low prices but add unexpected expenses after you book. Others take your money for a “non-refundable” reservation and cancel it at the last minute, leaving you stranded without a place to stay.
- Fake images: Scammers may also steal photos from actual hotels or rental listings to make their counterfeit properties look legitimate. Some even use AI to create bogus images to fool consumers.
You can use tools like Google Reverse Image Search to check if the listing photos are copied from somewhere else. Also, read verified reviews on trusted platforms like TripAdvisor, Google Reviews, or well-established booking websites.
Malware-Infected Advertisements (Malvertising)
Malvertising is another cyber threat that targets travellers. Scammers place infected ads on trusted websites like travel blogs, booking platforms, and social media.
These ads may look normal, but they contain harmful code that puts your personal information and devices at risk.
Here’s how malvertising works:
- Fake booking websites: Scammers create fake platforms that closely mimic real ones, such as “B00king.com” instead of “Booking.com” or “Exped1a.com” instead of “Expedia.com.”
Deceptive domain names are purchased and promoted through Google Ads, social media, or phishing emails to trick you into believing their authenticity. Scammers can then steal personal information, including credit card details and login credentials.
- Silent malware downloads: Some ads secretly install malware on your device without you knowing, allowing scammers to record your keystrokes to steal passwords, access your saved credit card details, or even take over your browser to redirect you to scam websites.
Here’s how to protect yourself from these threats:
- Use an ad blocker: A reliable ad blocker can stop you from falling victim to malicious ads by blocking them.
- Look out for scare tactics: Be cautious of ads that promote urgency, like “Limited Offer—80% Off!” as they are designed to rush you into clicking.
- Check URLs carefully: Before entering sensitive information, ensure the website is legitimate. Look for HTTPS encryption and avoid URLs with extra characters or misspellings.
Staying alert and taking these steps enables you to protect yourself from malvertising when browsing and booking online.
Fallen Victim to a Fake Hotel Deal? Steps to Take
Getting scammed by a fake hotel deal is stressful and costly, but acting quickly can help you recover your money and protect your personal information. Here’s what to do:
Contact Your Bank or Credit Card Provider
If you paid by credit card, contact your bank immediately and request a chargeback for fraud. Depending on their policies, most banks allow you to dispute transactions within 60–120 days. With debit card payments, report the scam immediately and ask about refund options.
Recovering money lost through wire transfers or cryptocurrency is unlikely. However, it’s still important to report the scam to help prevent further misuse and protect others from falling victim to the scam.
Report the Scam
File a complaint with the appropriate consumer protection agency in your country.
- S.: Report to the Federal Trade Commission (FTC) at ReportFraud.ftc.gov and the Better Business Bureau (BBB).
- Australia: Report to Scamwatch (ACCC).
- K.: Report to Action Fraud.
In the event that the scam involves ads on platforms like Google, Facebook, or Instagram, report the fraudulent advertiser using their online tools. For example, you can report the scam through Google’s Safe Browsing or Meta’s fraud reporting tool.
Notify the Booking Platform and Hotel
Ads that are placed on platforms like Expedia, Booking.com, Airbnb, or Agoda should be reported through the platforms’ fraud or dispute forms. Also, contact the hotel directly using their official website or phone number (not the one in the fake listing) to check if a reservation was made.
Protect Your Financial Accounts
Scammers might use or sell your stolen card details, leading to future unauthorised charges. To stay safe:
- Set up real-time transaction alerts on your banking app.
- Change your passwords for email and financial accounts, especially if you entered them on a suspicious website.
Taking these steps minimises the damage and financial risks caused by the scam.
Stay Vigilant and Protect Yourself
Developing good cybersecurity habits is an ongoing process that helps you take control of your digital life. By staying informed, vigilant, and proactive, you can stay one step ahead of scammers and protect your personal and financial information when booking hotels online.