Your booking is real. The 'payment failed' message isn't.

One mid-2026 analysis puts the average loss near $1,000 per victim. After a genuine Booking.com or Agoda reservation, a message arrives on WhatsApp, Zalo, or even the platform's own inbox — quoting your exact name, hotel, and dates — claiming payment "failed" and your card needs "re-verification" within hours or the booking cancels. The link goes to a convincing fake payment page. The details are real because criminals compromise hotel back-office accounts (an April 2026 malware wave, PureRAT, hit hotel systems), not because your booking is fake.