--- title: "Holiday booking scams: fake deals and hijacked bookings" url: https://tapsafely.com/scams/holiday-booking-scams source: TapSafely description: "Fake holiday deals on social media, hijacked hotel messages and flights that don't exist. How holiday booking scams work, and how to book and pay safely." --- [Home](https://tapsafely.com/)/[Scam guides](https://tapsafely.com/scams/)/ Holiday booking scams # Holiday booking scams A villa at half the usual price, a package deal advertised on social media, or a message from your hotel asking you to confirm your card. Holiday scams cost people their money and often their trip. By the TapSafely editorial team · Updated 16 September 2026 · 4 min read Photo: [rupixen](https://unsplash.com/photos/Q59HmzK38eQ) / Unsplash ## In short Fake holiday deals on social media, hijacked hotel messages and flights that don't exist. How holiday booking scams work, and how to book and pay safely. **Top warning signs:** The price is far below similar places or trips; You're asked to pay by bank transfer, gift card, payment app or crypto; A message asks you to re-enter your card or pay again. **First thing to do:** If a message asks you to pay again or confirm your card, don't use the link. Open the booking platform's app or website yourself and check the booking there, or contact the platform's customer service. Example · Booking app message · Illustrative, links disabled Hotel Aurora Lisboa Dear guest, your card could not be verified and your reservation will be cancelled in 24 hours. Please confirm your payment details here: booking-guest-verify[.]com/r/88217 An example scam message with the warning signs highlighted. I got this one too ## How the scam works The most common holiday scams are fake deals: accommodation, flights or package holidays that don't exist, advertised at prices that look like a bargain. In 2024, people in the UK made 6,066 reports of holiday fraud to Action Fraud and lost £11,183,957, an average of £1,844 each. Over half of the reports mentioned social media. A newer version starts after you've booked. Criminals break into a hotel's or host's account on a booking platform and send guests messages from inside the real app, saying the card failed and the booking will be cancelled unless you pay again through a link. Because the message sits alongside your real booking, it looks genuine. Which? reported on victims of this in 2025. Other versions include fake travel agents that use the ATOL, ABTA or ABTOT logos without being members, tickets for flights that were never booked, and "free holiday" prizes that need an upfront fee. ## Red flags to look for - **The price is far below similar places or trips.** Compare with the same dates on well-known sites. A big gap is the lure. - **You're asked to pay by bank transfer, gift card, payment app or crypto.** The US Federal Trade Commission says not to pay anyone who insists on these, because the money is almost impossible to get back. - **A message asks you to re-enter your card or pay again.** Even inside the booking app. Never share card details through a link or a chat message; check the booking in the platform's own app instead. - **A deadline to pay or lose the booking.** "Cancelled in 24 hours" is designed to stop you checking with the platform first. - **The deal is only on social media.** No website you can check, no company details, and the "agent" moves the conversation to WhatsApp or DMs. - **Protection logos you can't verify.** Anyone can paste an ATOL, ABTA or ABTOT logo on a page. Check the membership number on the scheme's own website. - **The host wants to deal outside the platform.** Paying outside the platform means you lose its protection. Real hosts don't need to. ## What to do if you get one 1. If a message asks you to pay again or confirm your card, don't use the link. Open the booking platform's app or website yourself and check the booking there, or contact the platform's customer service. 2. Paste the link or the website into the [TapSafely checker](https://tapsafely.com/#check) to see who owns it and how new it is. 3. Book through well-known platforms or travel companies, and keep all payments and messages inside the platform. 4. Check a travel company's ATOL, ABTA or ABTOT membership on the scheme's own website, not on the company's page. 5. Pay by credit card. Avoid bank transfers, and never pay by gift card or crypto. 6. Search the property's address and photos online. The same photos listed elsewhere under another name are a warning sign. ## When the message comes from your hotel's real account In the hijacked-booking scam, the message may really come from the hotel's account on the platform, because criminals have taken it over. That's why the sender's name is no proof. What gives it away is the request: pay again, confirm your card through a link, or do it within hours. Check your booking in the platform's own app, and if in doubt, phone the hotel on a number you find yourself. ## Renting a flat for longer? Long-term rentals have their own tricks, like deposits for places you can't view. See [rental scams](https://tapsafely.com/scams/rental-scams). ## If you already paid or shared details ### Act quickly. It makes a difference. 1. Call your bank or card provider now, using the number on your card. Ask them to stop the payment or start a chargeback. 2. Tell the booking platform straight away through its app or website, not by replying to the message. 3. If you entered your booking account password on a link, change it and turn on two-step verification. 4. Report it to the official fraud service in your country. Our [what to do after a scam](https://tapsafely.com/been-scammed) page lists them. 5. Check whether your travel insurance or a scheme like ATOL covers you, and keep every message and receipt. More help: [what to do after a scam, and where to report it in your country](https://tapsafely.com/been-scammed). ## How to protect yourself next time ### Watch for anyone using your identity If you shared ID documents, card details or a Social Security number, monitoring can alert you when someone opens credit or accounts in your name. **Free:** In the US, a credit freeze at Equifax, Experian and TransUnion is free and blocks most new-credit fraud. Elsewhere, ask your bank and your credit reference agency about fraud alerts. - [Aura](https://tapsafely.com/go/aura?p=guide-holiday-booking-scams) Partner link · US identity theft protection with credit monitoring and fraud insurance. ### Keep security software with web protection on your devices It blocks many known scam and malware websites and warns about dangerous apps. That matters most if you installed an app or "support" tool someone asked you to. **Free:** Keep your phone and browser updated, and leave Google Play Protect or Microsoft Defender switched on. Both are free. - [Bitdefender](https://tapsafely.com/go/bitdefender?p=guide-holiday-booking-scams) Partner link · Security suite for phone and computer with web and scam protection. [Compare the tools that help, and what each costs](https://tapsafely.com/best-scam-protection-tools) Links marked Partner link may earn us a commission, at no cost to you. It never changes our advice, and the free option always comes first. [Affiliate disclosure](https://tapsafely.com/affiliate-disclosure). ## Questions people ask My hotel messaged me in the booking app asking to confirm my card. Is it real? Treat it as a scam until you've checked. Don't use the link. Open your booking in the platform's own app or contact its customer service, and never share card details in a chat. Is a holiday deal on Facebook or Instagram safe to book? Only if you can confirm the company is real, and you pay in a way you can reverse. Over half of UK holiday fraud reports in 2024 mentioned social media. How do I check an ATOL or ABTA logo is real? Look the company up on the ATOL or ABTA website using its membership number. A logo on the company's own page proves nothing. Can I get my money back after a holiday scam? Sometimes, if you act fast. Call your bank or card provider straight away. Credit card payments are the easiest to dispute. Was this page helpful? Yes No ## Have you had this one? Tell other people what the message said and how it reached you. It helps someone recognise it before they tap. No stories yet. Yours could be the one that warns someone. What happened First name (optional) Leave this empty Share my experience Leave out your own phone number, email and bank details. A person reads every comment before it appears. Phone numbers and web addresses are hidden when it's published. Scammers pretend to be real companies, so a company named in a comment is almost always being impersonated, not accused. See our [privacy notice](https://tapsafely.com/privacy#comments). ## Official sources and further reading We check our guides against advice from government agencies and consumer protection bodies. - [Don't let fraudsters trip you up this summer: new alert issued as people look to snap up online holiday deals](https://www.atol.org/news-and-blogs/2025/02/24/dont-let-fraudsters-trip-you-up-this-summer-new-alert-issued-as-people-look-to-snap-up-online-holiday-deals/) (ATOL (UK Civil Aviation Authority), with Action Fraud figures) - [Scam alert: why you can't trust that 'Booking.com' message](https://www.which.co.uk/news/article/why-you-cant-trust-that-booking.com-message-aNQwx7T2ltWs) (Which?) - [Avoid Scams When You Travel](https://consumer.ftc.gov/articles/avoid-scams-when-you-travel) (US Federal Trade Commission) ### Got a message like this? Paste the message or link Check it free ### Still unsure? Describe what happened and our AI assistant will help, in any language. Ask TapSafely ### On this page 1. [How it works](#how) 2. [Red flags](#red-flags) 3. [What to do](#what-to-do) 4. [When the message comes from your hotel's real account](#s0) 5. [Renting a flat for longer?](#s1) 6. [If you already paid](#already-paid) 7. [Questions](#faq) 8. [Your experiences](#experiences) 9. [Sources](#sources) ### Seen this scam? Your report helps warn people in your area. [Report it](https://tapsafely.com/report?category=marketplace) ## Related guides [· Buying and selling ### Rental and holiday booking scams A great flat at a low price, a landlord abroad and a deposit before viewing. How rental and holiday booking scams work and how to rent safely. Read guide](https://tapsafely.com/scams/rental-scams) [· Phishing ### Phishing links and fake login pages Learn the one skill that stops most scams: reading who really owns a link. With examples of look-alike addresses and fake login pages. Read guide](https://tapsafely.com/scams/phishing-links) [· Shopping ### Is this website legit? How to check in two minutes Not sure a shop, bank page or booking site is real? Quick checks, from reading the web address to domain age, before you pay or log in. Read guide](https://tapsafely.com/scams/is-this-website-legit)