Booking.com phishing electronic mail makes use of pretend $500 journey credit score to steal logins

Summer journey already prices sufficient. So, an electronic mail promising a $500 Booking.com journey credit score can really feel like a fortunate break.

That is strictly why this message we obtained deserves a more in-depth look. It makes use of a well-recognized journey model, a giant reward and a deadline to push you towards a blue “Redeem Now” button. The electronic mail additionally makes use of my actual identify in three locations, which makes the message really feel extra private and convincing.

However, the small print on this electronic mail elevate a number of crimson flags. The sender handle doesn’t even seem to narrate to Booking.com. The topic line feels obscure. The reward sounds broad. The deadline provides strain.

Scammers know persons are reserving flights, inns and last-minute journeys proper now. A pretend journey credit score can catch somebody on the excellent second.

BOOKING A SUMMER TRIP? HERE’S WHAT YOU’RE GIVING SCAMMERS

A pretend Booking.com electronic mail guarantees a $500 journey credit score whereas utilizing strain techniques and suspicious sender particulars to focus on vacationers. (iStock)

Before you click on something, let’s break down what makes this electronic mail look suspicious.

Sign up for my FREE CyberGuy Report

• Get my greatest tech ideas, pressing safety alerts and unique offers delivered straight to your inbox.
• For easy, real-world methods to identify scams early and keep protected, go to CyberGuy.com – trusted by tens of millions who watch CyberGuy on TV each day.
• Plus, you may get on the spot entry to my Ultimate Scam Survival Guide free while you be a part of.

Fake Booking.com electronic mail begins with strain

The topic line says “(1) Pending.” That wording is a crimson flag. It sounds pressing, but it surely doesn’t clearly clarify what’s pending.

Scammers typically use obscure topic strains as a result of they spark curiosity. You might open the message simply to search out out what wants your consideration.

Also, the quantity “(1)” makes the e-mail really feel like an account alert. It hints that one merchandise wants motion. That can push you to click on quicker.

An actual journey reward electronic mail ought to clarify the supply clearly. It mustn’t depend on thriller to get your consideration.

Sender handle doesn’t match Booking.com

The greatest giveaway is the sender handle. The show identify makes use of a Booking. com-style label. However, the precise electronic mail handle doesn’t seem to narrate to Booking.com in any respect. That is a serious warning signal.

Scammers can copy a emblem, model colours and a button. Still, the sender handle typically exposes the pretend. Always open the complete sender particulars earlier than clicking. Look previous the show identify. If the true handle makes use of an odd area, random letters or an unrelated firm identify, cease. That one element can prevent from a stolen password or a pretend fee web page.

Fake Booking.com electronic mail makes use of your actual identify

One element makes this rip-off really feel extra private: the e-mail makes use of my actual identify in three locations. That could make a pretend message really feel extra authentic.

Scammers use names, account-style particulars and pretend buyer IDs to decrease your guard. They need you to assume, “Well, they know who I am, so this must be real.”

But an actual identify doesn’t show an electronic mail is authentic. Your identify might already seem in outdated breaches, information dealer lists, leaked advertising databases or public information. That private contact ought to make you extra cautious, not much less.

GLOBAL SCAM CRACKDOWN LEADS TO 276 ARRESTS

Booking.com says vacationers ought to maintain communication and funds on its platform and report suspicious messages via official channels. (KairosDee/Getty Images)

Booking.com electronic mail reveals a suspicious date mismatch

Another unusual element seems close to the highest of the message. The electronic mail itself reveals “March 2026,” but it surely was truly despatched to us on June 23, 2026.

That mismatch issues as a result of actual journey reward emails normally have constant dates, marketing campaign timing and account particulars. A March label on a June electronic mail can recommend a reused template, a sloppy rip-off setup or a copied brand-style message.

Scammers typically transfer quick and recycle outdated layouts. So, when the date inside an electronic mail doesn’t match when it arrived, deal with that as one more reason to pause earlier than clicking.

Fake Booking.com credit score makes use of a tempting reward

The message says you’re eligible for a CA$500 Booking.com journey credit score. That quantity feels sufficiently big to matter. It additionally feels plausible sufficient to make you curious.

That mixture is harmful. Scammers don’t all the time use wild greenback quantities. They typically select a quantity that feels thrilling however nonetheless attainable.

The electronic mail additionally says the credit score will be utilized towards inns, flights or a Booking.com reservation in Canada. That broad wording makes the supply sound helpful to virtually anybody planning journey.

However, actual journey rewards needs to be simple to substantiate inside your official account. You mustn’t must click on an electronic mail button to search out out if a credit score exists.

Booking.com rip-off electronic mail borrows loyalty language

The message mentions a Spring Genius Loyalty Event. That sounds official as a result of Booking.com has used the Genius identify for its loyalty program. Scammers use acquainted program names as a result of they make pretend emails really feel extra plausible.

Still, the e-mail doesn’t give sufficient proof. It doesn’t clarify actual phrases. It doesn’t inform you to confirm inside your account. It primarily pushes you towards the “Redeem Now” button.

That is one other crimson flag. Real rewards normally seem in your official account, app or pockets space. A shock electronic mail ought to by no means be your solely proof.

Fake journey electronic mail makes use of flattery

The message says your exercise positioned you amongst a choose variety of loyal members. That line tries to make the reward really feel private. It suggests you earned one thing particular due to your reserving historical past.

However, the wording stays broad. It might apply to virtually anybody. Scammers typically use flattery to decrease your guard. When a message makes you’re feeling chosen, it’s possible you’ll spend much less time checking the small print. That is strictly what the scammer desires.

Booking.com rip-off creates deadline panic

The message says you need to reply earlier than June 23, 2026, at 11:59 p.m.. That actual deadline provides strain. It makes the credit score really feel prefer it might disappear at midnight.

Then the e-mail says the allocation will probably be launched if you happen to take no motion. In different phrases, it desires you to maneuver rapidly earlier than you examine the sender, hyperlinks or account particulars.

Urgency is without doubt one of the most typical rip-off techniques. When an electronic mail mixes a reward with a deadline, decelerate. An actual firm will allow you to confirm rewards by logging in safely via the official app or web site.

The ‘Redeem Now’ button is the hazard zone

The blue “Redeem Now” button is the half to keep away from. A rip-off hyperlink can take you to a pretend Booking.com sign-in web page. From there, scammers might attempt to steal your electronic mail handle, password, fee particulars or verification codes.

Some pretend pages look convincing. They might use the identical colours, fonts and emblem fashion as the true web site. However, the hyperlink behind the button tells the true story. Since you can’t absolutely belief a button in a suspicious electronic mail, don’t click on it. Open Booking.com via the official app as an alternative. You also can kind the web site into your browser.

FIVE DATA BROKER OPT-OUT MYTHS THAT LEAVE RETIREES EXPOSED

Travelers ought to keep away from clicking hyperlinks in suspicious reward emails and confirm any journey credit score via the official Booking.com app or web site. (martin-dm/Getty Images)

Junk folder warning shouldn’t be ignored

This electronic mail landed in our junk folder, and that’s value noting. Spam filters can flag suspicious sender patterns, bulk messages, unusual hyperlinks or identified rip-off conduct. They are usually not excellent, however they can provide you a helpful warning.

So, when a reward electronic mail seems in junk, deal with it with further warning. Do not click on first and examine later. The safer transfer is to delete the message and examine your account immediately.

CyberGuy reached out to Booking.com concerning the suspicious electronic mail. Booking.com responded with normal security steering for vacationers and stated it makes use of devoted groups and machine studying instruments to observe, detect and block suspicious exercise across the clock.

Booking.com responds to phishing issues

Booking.com responded to CyberGuy after we reached out concerning the suspicious electronic mail. The firm didn’t particularly confirm this electronic mail, however stated cybercrime and on-line fraud are usually not new or distinctive to Booking.com or the journey trade.

“At Booking.com, the security and data protection of our partners and travelers is a top priority. We have dedicated teams and employ machine learning tooling to monitor, detect and block suspicious activity around the clock and continuously work to enhance the robust security measures we have in place,” Booking.com stated.

Booking.com additionally advises vacationers to maintain communication and fee on its platform, look ahead to uncommon host requests or last-minute itemizing adjustments and report suspicious messages via its official customer support channels.

How to remain protected from Booking.com journey scams

A pretend journey credit score can look convincing at first, however a number of fast checks may help you keep away from a stolen login, pretend fee web page or follow-up rip-off.

1) Check the sender handle first

Do not belief the show identify alone. A rip-off electronic mail can say Booking.com, whereas the true sender handle has nothing to do with the corporate. Open the sender particulars and look intently. Strange domains, random letters or unrelated addresses are clear warning indicators.

2) Be cautious when an electronic mail makes use of your actual identify

Do not assume an electronic mail is protected as a result of it is aware of your identify. Scammers can get names from information breaches, people-search websites and advertising lists. If a message makes use of your identify whereas pushing a deadline, reward or login hyperlink, deal with it as suspicious.

3) Skip electronic mail hyperlinks and open the app

Do not click on “Redeem Now” from the e-mail. Instead, open the Booking.com app or kind the web site into your browser. Then examine your account for rewards, pockets credit or official messages. If the credit score is actual, it ought to seem there. Booking.com additionally advises vacationers to not transfer communication or fee exterior its platform as a result of scammers typically use that tactic to keep away from platform protections.

4) Watch for strain phrases

Words like Pending, Confirm, Final discover and Limited time can push you to behave quick. Slow down when an electronic mail provides a deadline. Scammers use urgency as a result of it retains you from checking the details.

5) Protect your login particulars

Never enter your password, fee particulars or verification codes from an electronic mail hyperlink. Also, use a password supervisor. It may help you keep away from pretend sign-in pages as a result of it normally won’t autofill your saved password on the unsuitable web site.

6) Turn on two-factor authentication

Turn on two-factor authentication (2FA) or passkeys to your Booking.com account, electronic mail account and fee accounts. That further step may help block a scammer who steals your password. Never share a one-time code with anybody who contacts you by electronic mail, textual content or cellphone.

7) Use sturdy antivirus software program

Use sturdy antivirus software program in your gadgets to assist detect malicious hyperlinks, pretend web sites and suspicious downloads. That further layer may help cease a rip-off earlier than it steals your data or infects your gadget. Get my picks for one of the best 2026 antivirus safety winners to your Windows, Mac, Android and iOS gadgets at CyberGuy.com.

8) Use a knowledge elimination service

Scammers can use your uncovered private data to make phishing emails really feel extra plausible. A knowledge elimination service may help scale back how a lot of your private information seems on people-search websites and information dealer lists. That could make it tougher for scammers to focus on you with customized journey scams. Check out my high picks for information elimination companies and get a free scan to search out out in case your private data is already out on the internet by visiting CyberGuy.com.

9) Report the pretend electronic mail

Report the message as phishing or junk in your electronic mail app. You also can ahead suspicious Booking.com-related emails to Booking.com’s customer support or report them via your account. This helps the platform monitor scams that impersonate its model. Booking.com says vacationers ought to report suspicious listings or communications via its official customer support channels to allow them to be investigated rapidly.

10) Mark the message as junk

Since this electronic mail already appeared within the junk folder, your spam filter doubtless noticed one thing suspicious. Mark it as junk and delete it. If you already clicked, change your Booking.com password via the official web site. Then examine your card exercise. Also, look ahead to follow-up rip-off messages that point out journey credit, refunds or account issues.

Kurt’s key takeaways

This pretend Booking.com electronic mail works as a result of it reveals up when journey is already in your thoughts. A $500 credit score sounds useful when inns and flights really feel costly. But the warning indicators are clear. The obscure topic line creates curiosity. The sender handle doesn’t seem related to Booking.com. The use of an actual identify makes the rip-off really feel extra private. The deadline provides strain. The “Redeem Now” button pushes you towards a dangerous click on. That is essential as a result of journey scams typically work quick. One pretend login web page can hand scammers your account, fee particulars or private data. The most secure transfer is to disregard the e-mail and examine your account immediately. If the credit score is actual, it ought to seem inside your Booking.com account. If it’s pretend, you simply averted a pricey summer season rip-off.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

With scammers utilizing trusted journey manufacturers to push pretend credit, ought to corporations like Booking.com do extra to guard prospects earlier than they fall for the clicking? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

• Get my greatest tech ideas, pressing safety alerts and unique offers delivered straight to your inbox.
• For easy, real-world methods to identify scams early and keep protected, go to CyberGuy.com – trusted by tens of millions who watch CyberGuy on TV each day.
• Plus, you may get on the spot entry to my Ultimate Scam Survival Guide free while you be a part of.

Copyright 2026 CyberGuy.com. All rights reserved.