- LDI NRW warned about hotel booking data fraud
- Criminals use stolen reservation data to send fake messages
- Scammers request payment verification or credit card details
- Travellers advised not to click links and to call hotel directly
- Two-factor authentication recommended for travel accounts
North Rhine-Westphalia’s data protection commissioner has cautioned travellers about scams using stolen hotel booking information. After cyber attacks on booking platforms, criminals obtain guest details and send fake messages asking for payment verification. Authorities urge travellers to be wary of unsolicited requests for credit card data.
The warning follows a surge of reported incidents in Mecklenburg-Vorpommern and previous waves across Germany. Hackers breach hotel booking systems or employee accounts to obtain legitimate data. Fraudsters then contact travellers via email or messaging services posing as accommodation providers. The messages contain exact reservation details.
The LDI NRW advises travellers not to click payment or verification links. Travellers should call the hotel directly using a known official phone number. Legitimate booking services typically handle transactions through official portals. Travellers should enable two-factor authentication across travel booking accounts.
