Page 1 of 1

Booking.com phishing scam??

Posted: Wed Jun 13, 2018 10:28 am
by Ecosse
Received this today... I can't see anything on it that is obviously dodgy (email was just noreply@booking.com) by BC have never sent anything like this before and there's nothing on my dashboard. Anyone else received this? I'm thinking phishing scam and if I click on the link it'll take me to a dodgy login page. What do people think?

Dear partner,
In compliance with the regulatory requirements of your country, we are obliged to confirm your personal and business identity. This information is needed in order to avoid any service interruptions.
This should only take a few moments of your time. However, filling out this form is necessary in order to continue performing your regular operations.
(followed by a Verify Account button)

Posted: Wed Jun 13, 2018 1:15 pm
by CSE
We have too, which was odd as the website done something about the privacy law a few months before it became legal.
The English is rather off beat too!
Hover over the button and you can see where the link goes.
If any doubt phone the office.

Posted: Wed Jun 13, 2018 2:43 pm
by Giuliano
I received, too, and clicking on the "verify" I was directed onto my (genuine) Booking.com admin page. Apparently no scam.

Posted: Thu Jun 14, 2018 12:25 pm
by Cymraes
It is genuine - amazingly.

I asked them via my extranet if it was genuine and they confirmed it was. It's a disgraceful way to communicate though and makes future phishing scams harder to spot.

Posted: Thu Jun 14, 2018 12:44 pm
by Ecosse
Thanks for your replies,everyone - I am absolutely gobsmacked (and disappointed) that BC would communicate in this way given the number of phishing attempts that look so similar!

Posted: Thu Jun 14, 2018 1:58 pm
by Cymraes
Ecosse wrote:Thanks for your replies,everyone - I am absolutely gobsmacked (and disappointed) that BC would communicate in this way given the number of phishing attempts that look so similar!
Tell them - they got a fairly scathing response from me. If we all do it then they may take the point. It should have been sent via the extranet. Not exactly rocket science is it!