Andorra Warns of Hotel Booking Scam via WhatsApp Posing as Legit Reservations

Andorra's National Cybersecurity Agency (ANC) has warned of a widespread WhatsApp scam where fraudsters pose as hotels to target guests with legitimate bookings, using precise reservation details to build credibility.

The fraudulent messages, which may also arrive via email or calls, include real information such as the hotel name, stay dates, guest name, and booking reference. Posing as hotel staff, scammers urge recipients to confirm or finalize their reservation through a provided link. This leads to a fake website designed to harvest personal and banking information.

Spain's National Cybersecurity Institute (Incibe), through its Internet User Security Office (OSI), first identified the campaign. It recommends ignoring the link, withholding any data, and verifying concerns directly through the hotel's official channels, website, or app. Recipients should block and delete the sender's number.

Those who have shared banking details must immediately notify their financial provider. Authorities advise gathering evidence—including screenshots, the sender's phone number, the malicious link, related messages, or payment records—before reporting to police.

Incibe has noted prior instances of similar scams exploiting existing customer data from hotels. Andorran residents and travelers should exercise caution with unsolicited reservation alerts.