A recent investigation by the consumer advocacy group Which? has exposed significant security vulnerabilities on Booking.com, leaving users highly susceptible to fraud. The probe reveals a concerning lack of robust security measures, particularly regarding identity verification for property owners and the presence of an easily compromised messaging system. These shortcomings create an environment where holidaymakers are at considerable risk of falling victim to various scams.
The Which? investigation demonstrated the ease with which fraudulent listings can be created on Booking.com. Investigators were able to list a property within 15 minutes, bypassing the stringent identity checks typically enforced by competitors like Vrbo and Airbnb. This lack of verification has led to a proliferation of fraudulent listings, evidenced by numerous user complaints in the review sections detailing instances of nonexistent accommodations. Despite Which? reporting these issues, many problematic listings remained active for extended periods.
The investigation further revealed that Booking.com’s security systems are easily breached, enabling scammers to list fake properties and even compromise legitimate listings. While Booking.com claims to restrict prepayments for new hosts without established reviews, Which? asserts that this measure is easily circumvented by determined fraudsters. The presence of numerous scam reports and a lack of prompt refunds underscore the severity of the platform’s security vulnerabilities.
A glaring loophole was also discovered within Booking.com’s two-factor authentication (2FA) system. A 2FA expert alerted Booking.com to the ineffectiveness of the security measure on a guest account, demonstrating how easily an email hack could grant access to sensitive information without additional verification. This unaddressed flaw leaves countless users vulnerable.
The consequences of these security failings go beyond mere financial losses. Scams have forced users to cancel or postpone travel plans, causing significant emotional distress and disrupting meticulously planned vacations.
As the Online Safety Act’s illegal harms codes are set to take effect on March 17, Booking.com faces mounting pressure to proactively combat user-generated fraud. Which? is urging the platform to implement mandatory identity checks for hosts, enforce comprehensive two-factor authentication for all users, and ban external links in messages to prevent phishing scams. Furthermore, the consumer group calls for prompt investigation and action on all scam reports.
Which? is also advocating for strong regulatory action from Ofcom, the UK’s communications regulator, against platforms that fail to comply with the Online Safety Act. Rocio Concha, Director of Policy and Advocacy at Which?, emphasizes that swift and decisive action is needed to send a clear message that online platforms must prioritize user protection.
Avoiding Travel Scams
Stick to well-established platforms like Airbnb, Booking.com, Vrbo, or Expedia. These sites often have verification processes for hosts and listings, as well as customer support to resolve issues. Avoid unfamiliar or unverified websites, which may lack security measures.
Check for detailed descriptions, high-quality photos, and reviews from previous guests. If a listing lacks reviews or has limited information, proceed with caution. Research the property’s address using Google Maps or Street View to confirm its existence and match the photos provided.
Scammers often lure victims with prices far below market rates. Compare similar properties in the area to identify unrealistic offers and avoid falling for fraudulent deals.
Never agree to communicate or transfer money outside the booking platform, as this voids protections offered by reputable sites. Scammers often use external links or direct communication to bypass security features.
Pay with credit cards or PayPal, which offer fraud protection and chargeback options in case of disputes. Avoid wire transfers or direct bank payments, as these are harder to trace and recover.
Set up two-factor authentication (2FA) on your account whenever possible. This adds an extra layer of security by requiring a secondary verification step during login.
Ensure you’re booking through secure websites with “HTTPS” in the URL and a padlock icon in the browser address bar. Scammers often create fake websites with slightly altered domain names.
Look for patterns in reviews that may indicate recurring issues with the property or host. Verified guest reviews on trusted platforms are more reliable than unverified testimonials.
A legitimate host will answer inquiries about amenities, check-in processes, or other details clearly and professionally. Evasive responses are a red flag for potential scams.
After booking, contact the property to confirm your reservation details. If there’s no record of your booking, report the issue immediately to your payment provider and booking platform.
By following these practices, you can significantly reduce your risk of encountering scams while booking accommodations online and ensure a safer travel experience.
Verifying Host Identity
To verify the identity of a host before booking on Airbnb, you can take the following steps:
-
Check for the “Identity verified” badge on the host’s profile. This red badge with a tick next to the profile photo indicates that Airbnb has verified the host’s identity.
-
Look for the “Identity verified” label in the host section of the listing page. This shows that the host has completed Airbnb’s verification process.
-
Review the host’s profile information, including their legal name and other personal details that Airbnb has confirmed.
-
Read through guest reviews carefully. Verified guests who have stayed with the host can provide insights into their experience and the legitimacy of the listing.
-
Use the Airbnb messaging system to communicate with the host and ask any questions you may have about their identity or the property. A legitimate host should be willing to provide clear and professional responses.
-
Be cautious of new listings with no reviews or hosts who pressure you to communicate outside of the Airbnb platform.
Remember that while Airbnb’s verification process helps increase trust and safety, it’s not a guarantee. Always use the platform’s secure booking and payment systems for your protection.
Fake Host Profile
Identifying a fake host profile on platforms like Airbnb or Booking.com involves recognizing several key red flags:
-
-
Profiles with minimal details about the property, such as missing descriptions, amenities, or photos, are suspicious. Legitimate hosts typically provide comprehensive information to attract guests.
-
-
-
A host with no reviews or only a few low-quality reviews might be a scammer. Look for profiles with multiple reviews from verified guests.
-
-
-
Hosts who communicate poorly, use broken language, or avoid answering questions directly may be suspicious. Legitimate hosts usually respond clearly and promptly.
-
-
-
Be wary of hosts who ask for payments outside the platform’s secure payment system. This is a common tactic used by scammers to bypass security measures.
-
-
-
If the property photos seem doctored or the descriptions don’t align with the images, it could indicate a scam. Use reverse image searches to verify the authenticity of photos.
-
-
-
New listings offering unusually low prices or overly attractive amenities might be scams. Compare prices with similar properties in the area to identify unrealistic deals.
-
-
-
Profiles lacking verification badges or essential information like a profile photo, bio, or contact details are red flags. Legitimate hosts typically have verified profiles.
-
-
-
Hosts who insist on communicating or transacting outside the platform’s messaging system are likely scammers. Always keep interactions within the platform for safety.
-
By being aware of these signs, you can better protect yourself from potential scams when booking accommodations online.
Lack of Detailed Information
When booking accommodations online, a lack of detailed information in a host’s profile or property listing is a significant warning sign. Here’s why this is problematic and what to look out for:
-
Legitimate hosts typically provide comprehensive information to attract guests and set clear expectations.
-
Scammers often create vague listings to avoid scrutiny and to lure unsuspecting travelers.
-
: Be wary of listings with minimal details about the accommodation’s features, layout, or surroundings.
-
: Authentic listings usually have multiple, high-quality images showcasing different areas of the property.
-
: Legitimate hosts typically provide a detailed list of available amenities and facilities.
-
: Be cautious if the exact address or neighborhood details are not provided or are unclear.
-
: Most genuine hosts outline clear guidelines for guests.
-
: Legitimate profiles usually include some personal information or background about the host.
-
: Important logistical information should be clearly stated.
-
Request more information from the host through the platform’s messaging system.
-
If the host is unresponsive or provides unsatisfactory answers, consider it a warning sign.
-
Compare the listing with others in the same area to see if the level of detail is similar.
Remember, a lack of detailed information could indicate a hastily created fake listing or a host who may not be committed to providing a quality experience. Always err on the side of caution when booking accommodations online.
Online Reviews
Online reviews are a valuable resource for evaluating the reliability of a host. By analyzing reviews carefully, you can identify patterns and red flags that help you make informed decisions. Here are some strategies to effectively use reviews:
1.
-
Look for reviews from verified guests who have booked through the platform. Verified reviews are more likely to reflect genuine experiences.
-
Platforms like Airbnb and Booking.com often indicate whether a review is from a verified guest, adding credibility.
2.
-
Check the host’s average rating and compare it with other listings in the area.
-
A consistently high rating indicates reliable service, but be cautious of profiles with perfect scores and no critical feedback, as these may be manipulated.
3.
-
Focus on the most recent reviews to get an up-to-date understanding of the host’s reliability and property condition.
-
Hosts or properties may change over time, so older reviews may not accurately reflect the current state.
4.
-
Pay attention to recurring themes in both positive and negative reviews. For example:
-
Positive patterns: Cleanliness, responsiveness, or accurate descriptions.
-
Negative patterns: Cancellations, unresponsiveness, or misleading photos.
-
-
Consistent complaints about similar issues are a red flag.
5.
-
A reliable host will often respond professionally to negative reviews, addressing concerns and offering solutions.
-
Lack of responses or dismissive replies may indicate poor customer service.
6.
-
Reviews that lack specific details or seem overly enthusiastic may be fake or incentivized.
-
Genuine reviews typically include personal experiences and specific examples.
7.
-
Hosts with a large number of reviews are generally more reliable than those with only a few.
-
However, don’t discount new hosts entirely—read their reviews carefully if they have any.
8.
-
Complaints about scams, unresponsive hosts, or properties not matching descriptions should be taken seriously.
-
Negative feedback about safety concerns or cleanliness is particularly important.
9.
-
Many platforms allow you to filter reviews based on keywords (e.g., “scam,” “cleanliness”). Use these tools to quickly identify potential issues.
10.
-
Hosts with a mix of positive and constructive feedback are often more trustworthy than those with only glowing praise.
-
Balanced reviews suggest authenticity and provide a clearer picture of what to expect.
By carefully analyzing online reviews using these strategies, you can better assess a host’s reliability and make safer booking decisions.
Unusual Payment Requests
When using Booking.com, be extremely cautious of any unusual payment requests. These are often signs of fraudulent activity:
-
Requests for payment outside the Booking.com platform
-
Urgent demands for immediate payment to avoid cancellation
-
Requests for credit card details via email, phone, or text
-
Claims of payment errors requiring a second payment
Legitimate transactions on Booking.com never require sharing credit card details through email, phone, or text. Any request to do so is likely a scam.
Fraudsters often gain access to hotel accounts on Booking.com, then:
-
Send messages through the platform’s messaging system
-
Use email, in-app communication, or even WhatsApp
-
Create a sense of urgency to pressure victims
-
Verify all payment requests directly with Booking.com or the hotel
-
Use only official contact details from the Booking.com website or app
-
Never click on links or download attachments from suspicious messages
-
Cross-check payment requests against your original booking confirmation
-
Pause and do not make any payments
-
Contact Booking.com customer service immediately
-
Report suspicious emails to report@phishing.gov.uk
-
Report suspicious texts to 7726
Other Countries will have their own reporting contact details.
