What the Fresh Advisory Is About
Recent warnings from authorities, including a notable advisory from the Kerala and Kolkata Police, highlight a sharp increase in online hotel booking fraud. Scammers are creating highly convincing fake websites that mimic those of real hotels and official
tourism bodies like the Kerala Tourism Development Corporation (KTDC). These fraudulent sites often appear as sponsored ads at the top of search engine results, tricking travellers who are searching for official booking pages. The scams are designed to steal your money and personal information, leaving you without a legitimate booking and often with no way to recover your funds. The core advice from these advisories is simple but critical: always verify you are dealing with the official hotel before providing any payment or personal details.
How the Scam Unfolds
The process is deceptively simple. A traveller searches for a hotel online and clicks a link that appears to be the official website. This lookalike site features the hotel's logo, photos, and branding, offering attractive discounts to lure you in. After you enter your details to book, you are prompted to pay. In India, this often involves being asked to transfer money via UPI or by scanning a QR code sent to you on WhatsApp. In other cases, called 'Reservation Hijack' scams, fraudsters hack into a hotel's actual booking system to contact confirmed guests. They then send official-looking emails or messages claiming a payment has failed and that you must re-enter your credit card details via a special link to avoid cancellation. The link leads to a fake payment portal, and your booking is never actually at risk—until you hand over your details to the scammer. You arrive at the hotel, excited for your stay, only to be told by the front desk that they have no record of your booking or payment.
Red Flags to Watch For
Protecting yourself starts with spotting the warning signs. Be highly suspicious of deals that seem too good to be true, as extremely low prices are a classic lure. Scrutinise the website URL. Fraudulent sites often have small misspellings or use a slightly different domain (e.g., .com instead of .org, or extra words). A legitimate, secure website will start with “https://” and show a padlock icon in the address bar. Another major red flag is the method of payment. Hotels and reputable booking platforms rarely ask for payment via direct bank transfer, a personal UPI ID, gift cards, or cryptocurrency. If you feel pressured to book immediately with claims of limited availability, take a step back. This is a common tactic to rush you into making a mistake. Finally, any communication that seems unprofessional, with grammar mistakes or an unusual tone, should raise your suspicions.
Your Verification Checklist
The headline's advice to "verify" is your strongest defence. Before booking, take these concrete steps. 1. Book Directly or Through Trusted Platforms: The safest method is to book directly on the hotel's official website or use a major, well-known travel aggregator. 2. Cross-Check Contact Information: Find the hotel on Google Maps and cross-reference the phone number and address listed with the details on the website you are using. Call the number from the Google Maps listing to confirm the booking details or the website's authenticity. 3. Confirm via Email or Call After Booking: If you've booked through a third-party site, call or email the hotel directly a day or two later to confirm they have received your reservation. 4. Pay with a Credit Card: Whenever possible, use a credit card for online bookings. Credit cards offer significantly better fraud protection and a clearer path to disputing a charge compared to debit cards or UPI transfers. 5. Be Wary of Follow-Up Requests: If you receive an unsolicited message about a payment failure after you have already booked, do not click any links. Instead, contact the hotel or booking platform through their official phone number or app to verify the claim.
What to Do If You Have Been Scammed
If you realise you've fallen for a scam, you must act quickly. The first step is to contact your bank or credit card company immediately to report the fraudulent transaction and request a chargeback. Block the card if necessary. Next, report the incident to the authorities. You can file a complaint by calling India's national cybercrime helpline at 1930 or by reporting it on the National Cyber Crime Reporting Portal (www.cybercrime.gov.in). It is also helpful to report the fraudulent website to the search engine where you found it and to inform the real hotel so they are aware their brand is being used for scams. This can help protect other unsuspecting travellers. Finally, gather all documentation related to the scam—including screenshots, emails, and transaction records—as this will be essential for your report to the bank and police.
