The Anatomy of a Modern Booking Scam
In the digital age, booking a hotel seems simple: a quick search, a few clicks, and you're set. However, cybercriminals are exploiting this convenience. They create highly convincing counterfeit websites that mimic legitimate hotels, complete with official-looking
logos, photos, and branding. These fake sites often appear as sponsored ads at the very top of search engine results, making them easy to mistake for the real thing. A recent advisory from the Kerala Police highlighted how fraudsters were targeting tourists by creating fake websites for the Kerala Tourism Development Corporation (KTDC). Unsuspecting travellers, believing they are on an official site, enter their payment details—credit card numbers, UPI IDs, or bank information—and make advance payments. The scammers then disappear with the money, leaving the traveller with a fake booking confirmation and no place to stay upon arrival.
Red Flags: How to Spot a Fraudulent Booking
While scams are becoming more sophisticated, there are several warning signs you can look out for. Be cautious of websites with URLs that have slight misspellings or unusual domains, like '.net' instead of '.com' or extra words added to a hotel's name. Another major red flag is the method of payment. Scammers often pressure you to act quickly with “limited-time offers” and request direct bank transfers or payments through UPI to personal accounts rather than a secure, integrated payment gateway on the hotel's official site. They might call you or send a message claiming your initial payment failed and demand you send money again through a different link. Remember, legitimate hotels and booking platforms will not pressure you into making urgent, unsecured payments over the phone or via a WhatsApp message.
Your Pre-Payment Verification Checklist
Before you share any financial information or personal documents, taking a few minutes to verify can save you from significant loss and stress. First, always find the hotel's contact number from a trusted source. Instead of clicking the first link in a search, which could be a fraudulent ad, go directly to the hotel chain's official corporate website (e.g., marriott.com, ihg.com) or a reputable large-scale booking aggregator. Once you find the number, call it to confirm the hotel's existence and its official website address. If you've already made a booking through a third-party site, use the official number you found to call the hotel directly and confirm they have received your reservation details. Never use the contact number provided in a suspicious email or on a website you are not 100% sure about. This simple phone call is your best line of defence.
What to Do If You Suspect You've Been Scammed
If you realise you have paid a scammer or shared your financial details on a fraudulent site, it is crucial to act immediately. The first step is to contact your bank or credit card company to report the fraudulent transaction, block your card, and dispute the charge. If you used UPI, report the transaction through your payment app and to your bank. You should then file an official complaint. Indian authorities have a dedicated National Cyber Crime Reporting Portal (www.cybercrime.gov.in) and a 24/7 helpline number, 1930, for reporting financial cyber fraud. Reporting the incident quickly increases the chances of freezing the transferred funds and helps authorities track down the criminals, preventing them from duping others.
