Booked a place on Booking.com and a few hours later I got a WhatsApp message about my reservation. That immediately set off alarm bells since I never agreed to WhatsApp contact.
A few days later, the same WhatsApp number sent me a link asking for personal data, including a selfie with my passport. I blocked it right away. Then another person contacted me, also claiming to represent the property, again asking for personal documents and photos. I didn’t send anything.
Through the Booking.com chat, I confirmed that check-in would be done in person during the stated hours. Then on the day of arrival, the property messaged me on Booking.com telling me I had to contact someone by phone, without explaining why it couldn’t be handled in the chat. At the same time, the Booking app itself showed a warning saying to avoid suspicious activity and not respond to unusual links or messages.
I reported all of this to Booking.com as suspicious. No response. Not before check-in, not during my stay, not after.
When I arrived, I found out the place was basically a large building full of studio apartments run by a company. No reception, no staff on site, no security. Just an intercom. I was refused entry and told I had to send photos and scans of my documents via WhatsApp to a third party. I was essentially threatened with being locked out at night in an unfamiliar area. Under that pressure, I gave in and sent my personal data.
Booking.com still never responded.
While staying there, someone tried to hack my Facebook account tied to the phone number used for the booking. The day after checkout, my Instagram account linked to the booking email was also targeted.
The only reply I ever got from Booking.com was after emailing their data protection address, and that was just a template saying I contacted the wrong department.
This whole experience felt unsafe, both digitally and physically, and the complete silence from Booking.com was honestly the worst part.
0