The short version
- Open bookings in the official app or by typing the website yourself, never from a link in a text or email.
- Find support numbers inside the app or on the official site, not in search ads or social media replies.
- Nobody legitimate asks you to pay by gift card, wire transfer or a new "verification" charge.
Booking scams work because they arrive when you're busy and worried. A text says your reservation was cancelled. An email says your card didn't go through. A search for your airline's phone number turns up a polished page with a toll-free number. Every one of them wants the same thing: your login, your card or a payment.
How the scam is built
It usually starts with data. When a travel company leaks customer emails or phone numbers, scammers know who has a trip coming up. Then they register a website that looks like the real brand, with a name that's close enough to pass at a glance. Then the messages go out.
Three habits that beat it
- Go in through the front door. Open the airline, hotel or booking app yourself, or type the address. If the message was real, you'll see the same notice there.
- Get the number from the source. Use the support number inside the app or on the official website. Scam numbers show up in search ads and in replies to complaints on social media.
- Watch how they want to be paid. Gift cards, wire transfers, payment apps and "small verification charges" are red flags every time.
If you already clicked
Change the password on that account and anywhere you reused it. Call your card issuer using the number on the back of the card. Then check whether your email has shown up in a breach with a free service like Have I Been Pwned.
Calm beats clever. A scam needs you to hurry. Slow down for one minute and most of them fall apart.
Want to practice this with a professional? Our partner Contingent Group teaches situational awareness, self-defense and trauma care in person. See training →
Next: The 10-second exit check every security team teaches first →