World · Europe · 51 mins ago
Hotel booking scams use stolen customer details to demand fake payments
Hackers have broken into hotel booking platforms and stolen guests’ reservation details.
They use accurate information, such as dates, rooms and prices, to make fake payment requests look genuine.
One guest paid about 250 Swiss francs through a link that led to scammers, not her hotel.
Swiss data protection officials say they have received numerous reports of this kind of attack.
In some cases, hackers trick hotel staff into installing spyware by sending them links disguised as customer inquiries.
Officials recommend that hotels use two-factor authentication and train staff to spot threats.
Guests should not enter passwords or card details on a page opened from an email or text link, and should tell the hotel and booking platform about suspicious messages.
Swiss authorities say they have received more data-security breach reports so far this year than during all of last year, though not all involve data theft.
Cybercriminals are targeting hotels and booking platforms to steal customer details and demand fake payments.
In one case, a traveller paid about 250 Swiss francs through a fraudulent link sent with accurate booking information.
The Swiss Federal Data Protection and Information Commissioner says it has received numerous reports of unauthorised access to booking platforms.
Attackers may also trick hotel staff into installing spyware through links in apparent customer enquiries.
Authorities advise people not to enter passwords or credit card details on websites opened through email or text-message links.
- Who
- Cybercriminals are targeting hotel guests, hotels and booking platforms.
- What
- Scammers use stolen booking details to send fake payment requests and phishing links.
- When
- The article was published on 13 October 2026. The reported fraud took place before the traveller’s hotel stay.
- Where
- The case involved a hotel in Switzerland; the article also describes attacks on hotels and booking platforms more broadly.
- Why
- The attackers seek payment information and money from hotel guests.
This story does not have two clearly opposing sides.
A traveller received a fake payment request containing accurate details of her booking.
The traveller paid about 250 Swiss francs through the fraudulent link.
The hotel manager said the money had not gone to the hotel and advised her to report the fraud.
- Victim’s loss
- About 250 Swiss francs
- Attack method
- Fake payment links sent with stolen booking details
- Data theft tactic
- Spyware installed through a link in an apparent customer enquiry
- Recommended protection
- Do not enter passwords or credit card details on sites opened from email or text links
What people are saying
numerous reports
attacks on hotels
We have received more reports of data security breaches in the current year than in the entire previous year.
Sources
Related news
Zelensky says Russian strikes violated Trump’s proposed energy ceasefire
Zelenskyy says Russia is still attacking Ukraine’s energy sites
Moscow mayor says air defenses destroyed 13 more drones heading toward city
14-year-old pupil detained after teachers shot at school in southern France
Fire destroys Paris’s 17th-century Marché des Enfants Rouges
Russia says Europe bought $320.7 billion in its energy since 2022
US says Russian diesel deal aims to bring Moscow back to peace talks
Warsaw raises alarm over Russian threats in Europe
BFM Business replay examines Russian threats in Europe
Trump announces Russia-Ukraine energy ceasefire as diesel deal draws criticism
VVD calls for EU reform as the bloc considers expansion
