Fake Booking.com travel credit scam targets travelers

That is exactly why this message we received deserves a closer look. It uses a familiar travel brand, a big reward and a deadline to push you toward a blue "Redeem Now" button. The email also uses my real name in three places, which makes the message feel more personal and convincing.

However, the details in this email raise several red flags. The sender address does not even appear to relate to Booking.com. The subject line feels vague. The reward sounds broad. The deadline adds pressure.

Before you click anything, let's break down what makes this email look suspicious.

Sign up for my FREE CyberGuy Report

The subject line says "(1) Pending." That wording is a red flag. It sounds urgent, but it does not clearly explain what is pending.

Scammers often use vague subject lines because they spark curiosity. You may open the message just to find out what needs your attention.

Also, the number "(1)" makes the email feel like an account alert. It hints that one item needs action. That can push you to click faster.

A real travel reward email should explain the offer clearly. It should not rely on mystery to get your attention.

The biggest giveaway is the sender address. The display name uses a Booking. com-style label. However, the actual email address does not appear to relate to Booking.com at all. That is a major warning sign.

Scammers can copy a logo, brand colors and a button. Still, the sender address often exposes the fake. Always open the full sender details before clicking. Look past the display name. If the real address uses a strange domain, random letters or an unrelated company name, stop. That one detail can save you from a stolen password or a fake payment page.

One detail makes this scam feel more personal: the email uses my real name in three places. That can make a fake message feel more legitimate.

But a real name does not prove an email is legitimate. Your name may already appear in old breaches, data broker lists, leaked marketing databases or public records. That personal touch should make you more cautious, not less.

Another strange detail appears near the top of the message. The email itself shows "March 2026," but it was actually sent to us on June 23, 2026.

That mismatch matters because real travel reward emails usually have consistent dates, campaign timing and account details. A March label on a June email can suggest a reused template, a sloppy scam setup or a copied brand-style message.

Scammers often move fast and recycle old layouts. So, when the date inside an email does not match when it arrived, treat that as another reason to pause before clicking.

The message says you are eligible for a CA$500 Booking.com travel credit. That amount feels big enough to matter. It also feels believable enough to make you curious.

That combination is dangerous. Scammers do not always use wild dollar amounts. They often choose a number that feels exciting but still possible.

The email also says the credit can be applied toward hotels, flights or a Booking.com reservation in Canada. That broad wording makes the offer sound useful to almost anyone planning travel.

However, real travel rewards should be easy to confirm inside your official account. You should not need to click an email button to find out if a credit exists.

The message mentions a Spring Genius Loyalty Event. That sounds official because Booking.com has used the Genius name for its loyalty program. Scammers use familiar program names because they make fake emails feel more believable.

Still, the email does not give enough proof. It does not explain real terms. It does not tell you to verify inside your account. It mainly pushes you toward the "Redeem Now" button.

That is another red flag. Real rewards usually appear in your official account, app or wallet area. A surprise email should never be your only proof.

The message says your activity placed you among a select number of loyal members. That line tries to make the reward feel personal. It suggests you earned something special because of your booking history.

However, the wording stays broad. It could apply to almost anyone. Scammers often use flattery to lower your guard. When a message makes you feel chosen, you may spend less time checking the details. That is exactly what the scammer wants.

The message says you must respond before June 23, 2026, at 11:59 p.m.. That exact deadline adds pressure. It makes the credit feel like it could disappear at midnight.

Then the email says the allocation will be released if you take no action. In other words, it wants you to move quickly before you inspect the sender, links or account details.

Urgency is one of the most common scam tactics. When an email mixes a reward with a deadline, slow down. A real company will let you verify rewards by logging in safely through the official app or website.

Some fake pages look convincing. They may use the same colors, fonts and logo style as the real site. However, the link behind the button tells the real story. Since you cannot fully trust a button in a suspicious email, do not click it. Open Booking.com through the official app instead. You can also type the website into your browser.

This email landed in our junk folder, and that is worth noting. Spam filters can flag suspicious sender patterns, bulk messages, strange links or known scam behavior. They are not perfect, but they can give you a useful warning.

So, when a reward email appears in junk, treat it with extra caution. Do not click first and investigate later. The safer move is to delete the message and check your account directly.

Booking.com responded to CyberGuy after we reached out about the suspicious email. The company did not specifically verify this email, but said cybercrime and online fraud are not new or unique to Booking.com or the travel industry.

"At Booking.com, the security and data protection of our partners and travelers is a top priority. We have dedicated teams and employ machine learning tooling to monitor, detect and block suspicious activity around the clock and continuously work to enhance the robust security measures we have in place," Booking.com said.

Booking.com also advises travelers to keep communication and payment on its platform, watch for unusual host requests or last-minute listing changes and report suspicious messages through its official customer service channels.

A fake travel credit can look convincing at first, but a few quick checks can help you avoid a stolen login, fake payment page or follow-up scam.

Do not trust the display name alone. A scam email can say Booking.com, while the real sender address has nothing to do with the company. Open the sender details and look closely. Strange domains, random letters or unrelated addresses are clear warning signs.

Do not click "Redeem Now" from the email. Instead, open the Booking.com app or type the website into your browser. Then check your account for rewards, wallet credits or official messages. If the credit is real, it should appear there. Booking.com also advises travelers not to move communication or payment outside its platform because scammers often use that tactic to avoid platform protections.

Words like Pending, Confirm, Final notice and Limited time can push you to act fast. Slow down when an email adds a deadline. Scammers use urgency because it keeps you from checking the facts.

Since this email already appeared in the junk folder, your spam filter likely spotted something suspicious. Mark it as junk and delete it. If you already clicked, change your Booking.com password through the official site. Then check your card activity. Also, watch for follow-up scam messages that mention travel credits, refunds or account problems.

This fake Booking.com email works because it shows up when travel is already on your mind. A $500 credit sounds helpful when hotels and flights feel expensive. But the warning signs are clear. The vague subject line creates curiosity. The sender address does not appear connected to Booking.com. The use of a real name makes the scam feel more personal. The deadline adds pressure. The "Redeem Now" button pushes you toward a risky click. That is important because travel scams often work fast. One fake login page can hand scammers your account, payment details or personal information. The safest move is to ignore the email and check your account directly. If the credit is real, it should appear inside your Booking.com account. If it is fake, you just avoided a costly summer scam.

With scammers using trusted travel brands to push fake credits, should companies like Booking.com do more to protect customers before they fall for the click? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

Copyright 2026 CyberGuy.com. All rights reserved.