Andorra Warns of Hotel Booking Scam via WhatsApp Posing as Legit Reservations
Scammers use accurate reservation info to trick hotel guests into clicking malicious links that steal sensitive data. Authorities urge direct verification with hotels and immediate reporting of incidents.
Key Points
- Andorra's National Cybersecurity Agency alerts on WhatsApp scams impersonating hotels with real booking details like names and dates.
- Fraudulent messages urge link clicks to 'confirm' bookings, leading to fake sites stealing personal and payment data.
- Similar scams reported by Spain's Incibe; also possible via email or calls.
- Victims advised to block sender, verify via official hotel site, report to police, and contact banks if data compromised.
Andorra's National Cybersecurity Agency has warned of a widespread scam targeting hotel reservation holders via WhatsApp messages impersonating accommodations.
The alert echoes a notice from Spain's National Cybersecurity Institute (Incibe) through its Internet User Security Office (OSI). Cybercriminals are sending fraudulent messages that appear to come from hotels where victims have legitimate bookings. These messages gain credibility by including specific details such as the hotel name, check-in and check-out dates, guest name, and reservation number.
The messages claim an urgent need to confirm or validate the booking and provide a link to complete the process. However, the link leads to a fake website controlled by the scammers, designed to harvest personal information, payment details, or other sensitive data. Authorities note that similar frauds could arrive via email or even phone calls impersonating the hotel.
Incibe emphasises that the scammers' access to real booking information makes the ploy particularly convincing. Victims are urged not to click the link, share any data, or continue the conversation. Instead, they should report it to cybersecurity agencies, block and delete the sender, and verify any booking directly through the hotel's official website or app.
If banking details have been entered, contact the financial institution immediately to report the incident. Incibe also recommends gathering evidence—including screenshots of the message, sender's phone number, fraudulent link, displayed webpage, related emails, or payment receipts—and filing a police report.
The scam follows a standard pattern: a WhatsApp message pretends to be from the hotel, cites a need to finalise booking details to build trust, and directs users to the malicious site for data entry. Andorran residents with upcoming stays are advised to remain vigilant.
Related Articles
Other articles from Catalan-language sources about the same story: