Question 1

What is the "Booking.com Reservation Hijack and Off-Platform Payment Fraud" scam in Crete?

Accepted Answer

Fraudsters exploit real Crete hotel reservation data — obtained via breached hotel accounts and platform data leaks — to message guests on WhatsApp or inside the Booking.com app, quoting their actual name, booking reference and dates, then demand 'payment verification' through a fake link within 24 hours or the booking is cancelled. In a variant reported by Cretan police, the 'hotel owner' contacts guests after booking and persuades them to pay by direct bank transfer off-platform; one tourist lost 950 euros in July 2025 for a Crete room that never existed. Greek travel press names Crete among the destinations hit hardest because of its huge volume of international bookings, and Heraklion police have opened investigations. Never pay for a Greek hotel by bank transfer or via links sent over WhatsApp, even if the message contains your real booking details. Pay only through the platform's own payment flow, verify any 'payment problem' by phoning the hotel on the number from its official website, and treat urgent 24-hour cancellation threats as automatic proof of fraud.

Question 2

What is the "Airbnb Phishing and Double-Booking" scam in Crete?

Accepted Answer

Phishing emails mimicking Airbnb notify hosts of booking issues and prompt them to "update payment details" via fake links, compromising accounts. Scammers then rebook units at inflated prices to guests, pocketing the difference. Legitimate guests arrive to find no reservation, while hosts are unaware their properties were used fraudulently. Never click links in unsolicited emails about bookings. Log in directly to Airbnb.com instead. Hosts should enable two-factor authentication. Guests should always book through the official Airbnb app or website only. Screenshot your confirmation and communication thread.

Online Scams in Crete

Booking.com Reservation Hijack and Off-Platform Payment Fraud

Airbnb Phishing and Double-Booking

Experienced a scam here?