Can a hotel legitimateley message me for payment?

Some hotels may contact you for legitimate reasons, but they should never ask for payment details outside of the official Booking.com secure payment system.

What should I do if I get a suspicious message in the Booking.com app?

Do not click any links. Contact Booking.com customer support directly through their official website or app (using a trusted link) to verify the message.

Is it safe to pay via a link in a Booking.com email?

Only if the link clearly leads to the official `booking.com` domain. Always hover over links to see the true destination before clicking.

Booking.com Scam Checker

Verify a Booking.com message before you pay or login.

Scammers frequently impersonate Booking.com and individual hotels to send fake security alerts, urgent payment requests, and 'booking cancelled' notifications. Check the message before your trip is ruined by fraud.

Security Insight

Travel scams peak during holiday seasons, with Booking.com being a primary target due to the high value of hotel and flight reservations.

Built for travel & hotel check-ins

Detects 'Payment Failed' and 'Urgent Verification' scams

Useful for security alert phishing via email or app messages

Check a Booking Message Run SuperScan

Why Booking.com messages deserve extra scrutiny

Scammers often use compromised hotel accounts to message you directly within the Booking.com app, making the fraud look incredibly legitimate. This 'in-app' phishing is one of the hardest to spot.

The message demands an 'Urgent Payment'

Any message claiming your booking will be cancelled unless you pay via a new link is a major red flag.

You received a 'Security Verification' link

Fake alerts claiming your account has been accessed from a new location are used to steal your Booking.com credentials.

The hotel asks for payment outside the app

If a hotel messages you asking for a wire transfer, crypto, or payment via an external site, it is likely a scam.

The link domain is not booking.com

Check for lookalike domains like booking-reservation.com or verify-booking.net. Legitimate links should stay on the official domain.

What IsThisSpam checks before you trust a sender

Quick verdicts are useful, but the real value is understanding why something looks safe, uncertain, or risky.

High-pressure cancellation threats

Warnings that you will lose your reservation in '1 hour' if you don't click a link are classic social engineering tactics.

Language and grammar inconsistencies

While scammers are getting better, sudden shifts in tone or broken English in a supposedly official brand message are common indicators.

Redirects to external payment portals

Legitimate payments should happen through the secure Booking.com interface, not a random third-party site.

Requests for card details in chat

Never send your credit card number, CVV, or expiry date directly in a message to a hotel or support.

Related guides

Use the checker for the fast answer, then read the deeper guidance for recurring scam patterns.

How to Spot Travel Scams

Protect yourself from common fraud when booking hotels, flights, and tours.

Read the guide

Identifying Phishing Links

Learn how to spot a fake URL before you click.

Read the guide

FAQ

These are the questions people usually ask right before they click, reply, or pay.

Got a screenshot or attachment? Our AI can analyse it.

Free scan first, deeper analysis when you need it

Check the sender before you trust the message.

Start with a fast scan, then move to SuperScan when the message involves money, account access, or sensitive documents.

Check a Booking Message Run SuperScan