Pause the request, not the verification
An urgent message saying your hotel reservation will be cancelled unless you pay again deserves a check, not an immediate transfer. Do not open the payment link, send credentials or pay a verification fee while the sender remains unverified. Record the demand and the deadline it claims. Do not assume the message actually changed your reservation status.
AI-generated fictional photographic-style scene of an Indian traveller pausing with a blank phone screen. It is not a real hotel message, payment link or customer.
Booking.com's traveller safety page warns that phishing messages can contain convincing stay dates and costs and urgent requests to reshare payment information to retain a booking. The UK's Action Fraud advisory also describes criminals sending messages through compromised hotel accounts, including WhatsApp. These are documented possibilities, not proof that your particular hotel or account has been compromised.
Compare it with the payment policy
Open the confirmation you already hold and check who collects payment, what has been paid, what remains due, the currency and due date. Compare the new amount and requested method with that record. Mark any mismatch explicitly instead of deciding from the urgency or polished design of the message.
Booking.com's safety page says it will not ask for card details by email, phone, text or WhatsApp, and will not ask for a bank transfer different from the payment-policy details in the confirmation. The Action Fraud advisory notes that some accommodation providers manage their own payments and may contact guests, but the authenticity of the request should be checked before information is supplied. Do not turn either statement into a rule that all hotel payment requests are fake or that any matching amount proves legitimacy.
Verify outside the suspicious message
For a Booking.com reservation, use the official app/site support channel reached independently, not the number or link in the demand. Ask support to clarify the actual payment policy, whether anything is outstanding and whether the reservation is at risk. If contacting the hotel, use a genuinely established property contact, with attention to the exact property and booking.
Ask for a clear written answer about the amount, authorised collection route, due date and current status. Do not assume a familiar account or accurate reservation details authenticate a new payment instruction. Equally, verification should not mean ignoring a genuine balance indefinitely: resolve it through the actual provider and confirmed policy before the real deadline. No particular deadline, safe payment link or current booking status is established here.
If information or money was already sent
Stop further interaction through the suspicious route. Keep the message, sender identifier, link as text, date/time, payment record and any information shared. Contact the bank or payment provider through its genuine channel and describe the exposure accurately; ask which protective steps apply. Reach the actual booking platform or property separately to check the reservation.
For suspected financial cyber fraud in India, I4C identifies 1930 and the National Cybercrime Reporting Portal as reporting routes. Report promptly and retain acknowledgements. This article does not establish a recovery guarantee, automatic refund or universal reporting cutoff. Do not pay a caller who promises to recover the first payment for a new fee.
Sources and limits
Checked 13 November 2026: Booking.com traveller safety; UK Action Fraud alert, 10 January 2025; I4C financial cyber-fraud reporting. No clear current revision date was established for the Booking.com or I4C passages. The UK alert is an attack example and provider-payment caveat, not Indian law or an Indian reporting route. No actual message, account, payment link, balance, booking status or cancellation deadline is verified here. No automatic refund or recovery guarantee is established.
Planning your next trip?
We'll handle insurance, hotels, airport assistance and the itinerary — the same way we do it for every trip.
Questions on this article
asked by readers, answered by us
Was this helpful?
one tap, no sign-up




