Said It Here

Why am I getting WhatsApp scams with my real travel booking details?

Scammers are sending targeted WhatsApp messages containing exact reservation details like names, dates, and booking references shortly after users book through platforms like Booking.com or Hostelworld. This precise information tricks people into trusting the message and clicking links designed to steal credit card details.

Overview
People affected6 accounts across 2 forums
Workarounds found9 items attempted
Community agreement338 total upvotes

What people tried

Every workaround mentioned in the threads below. We haven’t tested any of them — and nobody here is claiming they worked.

Found another way around this?

Share your steps and trade-offs so fellow engineers don't have to reinvent the wheel. No account required.

  1. 1
    Blocking and reporting the messaging account
    Did this help you?
  2. 2
    Reporting the phishing domain to the booking platform
    Did this help you?
  3. 3
    Contacting the property directly via official phone numbers to verify reservation status
    Did this help you?
  4. 4
    Refusing to enter credit card information outside the official booking platform
    Did this help you?
  5. 5
    Not filling out forms on external links provided in messages
    Did this help you?
  6. 6
    Contacting the hotel directly through their official website or phone number to verify suspicious communications
    Did this help you?
  7. 7
    Ignoring messages containing external links or requests for verification on third-party messaging apps
    Did this help you?
  8. 8
    Canceling credit cards and issuing chargebacks if card info was exposed
    Did this help you?
  9. 9
    Posting vulnerability reports in developer community forums to bypass automated support loops and get staff attention.
    Did this help you?
Tried another approach not listed above?+ Share your workaround ↑

In their words

Unedited, grouped by where they were said, most upvoted first within each place, each linked to the thread it came from.

r/travel4 people · September 2026 – October 2026

“I made a villa reservation through Booking.com on Friday and 2 days later, at 05:29, I got a WhatsApp message from a WhatsApp Business account displaying the name "Awign.”source ↗

“Every detail in that message is correct - property, both dates, and my actual booking reference.”source ↗

Prior_Juice_8658 · r/travel · 310 upvotes

“Like an idiot, I put my id and card info, thinking it was the hotel. It failed, so I called the hotel and asked about it and they said they didn't have a third party verification service. I had to cancel my credit card and I'm going to have to go to the DMV to change my id.”source ↗

kidthatsasquid · r/travel · 17 upvotes

“Yeah, I’ve also gotten the messages on WhatsApp and did not engage. You can’t really trust any messages from hotels in the booking.com app anymore. I got a legit message from a hotel and I had to contact through their official website to confirm it was real.”source ↗

Binknbink · r/travel · 1 upvotes

“I booked a hostel through HostelWorld, and a few weeks later, I received the following WhatsApp message.”source ↗

“It is addressed to me by name, the name of the hostel and dates correspond to my reservation.”source ↗

“I did click on the link, and there is a field for credit card information, which I am not planning on giving outside of the Hostelworld platform or directly at the property.”source ↗

“I was curious if this is a normal thing that some hostels do, or if is definitely some form of scam. Anyone has experienced this?”source ↗

andina_inthe_PNW · r/travel
r/shopify2 people · October 2026

“tried chatting with support, who told me to submit a report on Hackerone. Fair enough, I write my report, but it doesn't pass the automated checks because it's not serious enough. Tells me to email [email protected] - email comes back bounced because they only take reports via Hackerone.”source ↗

YourUsernameForever · r/shopify · 8 upvotes

“I have been getting scam emails all day and couldn't figure out why some were super obvious and others were verified by google and passed spoofing checks. this question has been driving me nuts for hours.”source ↗

coolscones · r/shopify · 2 upvotes

Where this came up

People with this problem also raised