Is Booking.com Legit? Yes — the Site Is Real; Many of “Its” Messages Aren't

Legit platform — verify every message. Booking.com is a real, major travel marketplace; the danger is the wave of messages impersonating it or your accommodation, carrying your real dates and prices and urgently demanding you “(re)share payment information” to keep the booking. Its own never-ask rules convict the fakes: no card details by email, phone, text, or WhatsApp; no bank transfer that differs from your confirmation's payment policy; no gift cards, ever. Check every payment demand against the confirmation inside the app or a URL you typed yourself — anything that contradicts it is the scam.

Educational verdict from documented scam patterns — not a live report. For a 0–100 risk score on the exact link in your hand, run the checker.

Check a URL free Read the full guide

Why this question never goes away

Booking.com is a real, major travel marketplace — the question that matters is whether the message you're looking at is really from it. The platform's own safety page is blunt: it will never ask for card details by email, phone, text, or WhatsApp; never ask for a bank transfer that differs from the payment policy in your booking confirmation; and no legitimate transaction — a payment, a reservation change — ever requires gift cards or card details read out by phone, text, or email. Its customer service will only ever ask for your reservation ID and PIN — never your account password. The documented attack: messages claiming to be from your accommodation (or Booking.com itself) carrying your real dates and prices — often after the property's own email was compromised — urgently demanding you “(re)share payment information” to keep the booking. Check every payment demand against the confirmation inside the app or a URL you typed yourself; anything that contradicts it is the scam. Fake listings exist too: a price far below similar properties nearby is Booking.com's own named red flag.

Five red flags — any one is enough

Any email, text, or WhatsApp message asking for card details “to keep your booking” — Booking.com never does this.

A bank-transfer demand that doesn't match the payment policy in your confirmation.

The urgency frame — “transfer within 24 hours or your booking will be canceled.”

A property pushing payment or chat off the platform — real hosts use the platform's own messaging.

A price far below comparable properties in the same area — the platform's own fake-listing tell.

Your next three moves

Verify through a channel you open yourself — open the Booking.com app or type booking.com yourself, and check any payment demand against the confirmation inside your booking. Customer service will only ever ask for your reservation ID and PIN — never your account password.

Refuse the ask: no card details by email, phone, text, or WhatsApp; no bank transfer that differs from the payment policy in your booking confirmation; and no gift cards — no legitimate transaction ever requires them.

Report the message at reportfraud.ftc.gov and to Booking.com through the app — and paste any link from the message into the $2 instant check for a 0–100 scam risk score before you pay.

Is Booking.com a legitimate site?

Yes — it's a real, major travel marketplace. The question that matters is whether the message you're looking at is really from it: the documented attack is impersonation messages carrying your real dates and prices, often after the property's own email was compromised.

“My hotel” messaged me to re-share payment details — is it real?

Check it against the confirmation inside the app or a URL you typed yourself — anything that contradicts it is the scam. Booking.com will never ask you to share credit card details by email, over the phone, through text or WhatsApp, and no legitimate transaction ever requires gift cards.

Will Booking.com ever ask for my password?

No. Its customer service will only ever ask for your reservation ID and PIN — never your account password — and it will never ask for a bank transfer that differs from the payment policy in your booking confirmation.

How do I spot a fake listing on Booking.com?

The platform's own named red flag is a price far below similar properties nearby. Keep the booking and the payment on the platform's own rails, and treat any property pushing payment or chat off the platform as the scam it is.

Sixty seconds of checking beats a four-figure mistake.

Paste any URL for a free instant preview — the full 0–100 report is $2, one-time. No subscription.

Spot the scam before it spots you.

For businesses · $19, one-time

Is someone impersonating your brand?

The costume in these scams — a lookalike domain, a copied storefront, a spoofed sender — is exactly what the brand impersonation audit researches for your company: lookalike domains, typosquats, and copycat sites trading on your name, each with evidence and a risk rating, plus a ready-to-send takedown-request template.

Audit my brand — $19

Free brand scan first — you only pay for the full audit.