With southern Gran Canaria preparing to welcome thousands of tourists to its beaches and hotels, the popular Booking platform has become the new target of cybercriminals. The demand for accommodation in areas such as Maspalomas, Playa del Inglés, and Puerto Rico inevitably attracts the attention of those looking to make a killing at the expense of their vacation dreams. One of the most dangerous and popular schemes this summer is the canceled reservation scam, a phishing attack where criminals disguise themselves as hotels to set their trap.
Imagine the frustration: you've confirmed your stay at a bungalow in Meloneras or an apartment with sea views in Amadores. Suddenly, you receive a message, apparently from Booking.com or directly from the accommodation in the south, informing you that your reservation has been canceled due to "credit card issues." The immediate, and perfectly human, reaction is a click. You need to know what's happening with your vacation on the island.
Well, that's the perversity of this scam. What the user receives is a sophisticated phishing attack. Cybercriminals impersonate the accommodation (according to Booking, not the platform itself) and send you a message about a supposed payment error or a fake cancellation. The real goal isn't to inform you, but to steal your money and sensitive data just when your mind is in "vacation" mode.
The modus operandi is as simple as it is effective: the fraudulent message includes a fake URL. This malicious link has been designed to be almost identical to the official Booking.com portal or the hotel's website, with slight variations that often go unnoticed. The first and most crucial recommendation for those planning a trip to southern Gran Canaria is to never click on these types of suspicious links.
If the user falls into the trap and clicks, they will be redirected to this fraudulent website. There, the criminals have provided a form identical to that of a legitimate platform, inviting the victim to fill out their personal and banking information. Once this information is entered, the scam is complete. Reports indicate that some victims have lost more than €1.000 in these scams. The money often disappears quickly, making it extremely difficult to recover and ruining not only the reservation but also the budget for enjoying the Canarian sun.
The main problem with falling for this type of scam is the difficulty, if not impossibility, of recovering the money. The reason is a complex web of liability that, in practice, leaves the victim unprotected. Booking.com maintains that its system has not been hacked and that the impersonation occurs at the level of the registered hotel profiles. For their part, hotel chains often deny responsibility, claiming that the breach did not occur in their direct security systems.
Faced with this situation, where no one assumes the financial loss, the only effective defense is prevention. Adopting a stance of active distrust is essential for those planning a getaway to the golden beaches of southern Gran Canaria:
Be Wary of the Unexpected: Never trust unknown numbers or unsolicited messages, especially if they offer rewards or contain urgent alerts about your reservations.
Always check the URL: Before clicking on any link, hover over it (without clicking) to see the actual URL, or take a close look at the address bar if you've already clicked. Look for any minor anomalies.
Sensitive Data, Only on Secure Sites: Never provide banking or personal information through unverified links or numbers. Legitimate platforms usually have specific secure channels for this, and will never ask you for it out of the blue.
Contact Directly: If you even suspect a message or cancellation, the best course of action is to call the hotel's or Booking.com's official customer service directly using the numbers or channels you know (not the ones provided by the suspicious message). For example, find your hotel's number in Maspalomas or the platform's number on its official website and contact them yourself.
In the digital age, caution has become a traveler's best ally. Protecting your data is the first step to ensuring that your vacation in southern Gran Canaria is only enjoyable, not stressful.
