How Scammers Intercept Customers

Mid-Deal Subtitle: A breakdown of the real-world case that targeted travelers in Israel, and key safety takeaways for our classified ads users. Recently, a highly sophisticated scam swept through Israel and worldwide, targeting Booking.com users.

Right after booking a hotel, travelers received urgent messages via WhatsApp or the app’s internal chat, stating:

“Verify your card and pay immediately, or your reservation will be canceled. “Because the scammers addressed users by their real names, knew their exact travel dates, and specified the hotel name, the messages looked incredibly authentic.

Many people were on the verge of losing thousands of shekels, stopping only at the very last second.

How Did It Actually Work?

Many users assumed Booking.com itself was hacked or that an insider was leaking data. In reality, cybercriminals used a “compromise from within” strategy: Scammers sent phishing emails with malware to hotel staff (e.g., disguised as a “customer complaint document”).

Once a hotel employee opened the file, the malware gave hackers direct access to that specific hotel’s internal Booking.com dashboard.

The scammers saw the live database of bookings and began messaging guests while posing as the hotel management.

Why Does This Matter for Our Classified Ads Users?

This scheme perfectly mirrors tactics used on local peer-to-peer marketplaces when renting an apartment, buying a used car, or purchasing electronics.

Scammers rely heavily on creating a false sense of urgency and mimicking an official status.

How to Stay Safe on Our Platform:

The Internal Perimeter Rule: If you are talking to a seller/buyer and they suddenly say, “The site is glitching, let’s move to WhatsApp, I’ll send you a payment/shipping link,” — this is a 100% scam.

Say No to Urgent Deposits: Just like with the hotel scam, if someone demands an immediate bank transfer or deposit to “hold the item/apartment” because there is a long queue, close the ad.

Verify Official Communication: If you receive a message in a third-party messenger claiming to be from our classifieds support team but from an unknown phone number, it is fake.

We only communicate via official notifications inside your account dashboard.