Nearly ten times as many reports of phishing emails involving booking sites

The Dutch Fraud Helpdesk reported a tenfold increase in phishing attempts targeting users of booking websites during the first half of 2026. Criminals are impersonating hotels and booking platforms to deceive victims into making advance payments or confirming reservations via email and WhatsApp. This surge is linked to recent large-scale data breaches, including an incident at Booking.com in April where unauthorized parties accessed customer contact information. Because attackers possess more personal details, these fraudulent messages are becoming increasingly difficult for consumers to distinguish from legitimate correspondence.

In total, the fraud reporting center received over 15,000 phishing reports this year, with 443 individuals suffering financial losses totaling nearly 500,000 euros. Booking.com has responded by pledging further investment in cybersecurity measures and offering support to travelers who lost money to such scams. While the platform acknowledged the severity of the issue, it noted that the increased number of reports may also indicate that more people are becoming aware of these risks and choosing to report them to authorities.