Booking.com scams are designed to look believable at first glance. Messages like a strange text often arrive as ordinary alerts, emails, or requests. Most scam checks start with the same question: does the situation hold up when you verify it independently? The real goal is to create pressure and get you to act before you stop to verify the details.

What This Scam Pattern Usually Looks Like

In many Booking.com situations, the message is written to build trust and urgency at the same time. Something like a strange text may sound routine, but it is often trying to get quick access to your information, money, or account before you can slow down and verify it.

The display name on the message read "Booking.com," crisp and familiar, but the from address was a jumble of letters and numbers with a domain that had no connection to the real company—something like bookingsupport247.net. At first glance, it looked official, the kind of alert you’d expect from a travel site. The subject line caught the eye immediately: "Important: Your Booking Confirmation #4521." It suggested something urgent, something personal, even though no recent reservation had been made. The body of the email mentioned a recent login attempt and asked the recipient to verify their identity. There was a single button labeled "Continue Securely" in bold blue text. Hovering over it revealed a URL almost identical to the real Booking.com site, but the domain was off by three characters—something subtle enough to fool a quick glance. The webpage that loaded was a near-perfect copy of the official login page, down to the fonts and layout, asking for an email address and password. The form fields were straightforward: email, password, and a checkbox for "Remember Me." The message below the form warned that failure to verify would result in account suspension. The dollar amount referenced was $1,200, supposedly charged to the account for a hotel stay that never happened. The agent’s note at the bottom read, "If this wasn’t you, please confirm immediately to avoid cancellation." The tone was urgent, but the details were fabricated. The credentials were entered and submitted, triggering a redirect to the real Booking.com homepage. The login information was captured before the redirect, used to log in from a different IP within the same session.

Scams connected to Booking.com often work because they combine ordinary wording with pressure. That mix can make a message feel routine enough to trust and urgent enough to act on before independently checking the details, especially when something like a strange text is used as the starting point.