Search "hotel WhatsApp scam" and you'll find a hundred articles telling travellers what not to trust. That advice matters. But it leaves out half the picture: if guests are taught to be suspicious of every message, they also start ignoring the real ones — the check-in details, the early-arrival confirmation, the restaurant booking they actually asked for.
We build hotel WhatsApp for a living, so we see the other side. This is what a genuine hotel message looks like from the inside — the signals that separate a real conversation from a convincing fake, and why they're hard to counterfeit.
Why this question matters right now
In April 2026, a breach connected to Booking.com exposed guest names, email addresses, phone numbers and reservation details — not payment card data, but more than enough for a convincing scam. Criminals used those genuine booking details to message travellers on WhatsApp, referencing the correct hotel, the correct dates and the correct name, then pushing them toward a fake payment page.
That's what makes the current wave effective: the details are real, so the usual advice ("look for spelling mistakes") no longer helps. The better question isn't "how do I spot a fake?" — it's "what does a real hotel message actually do, and what does it never do?"
The anatomy of a genuine hotel WhatsApp message
1. It comes from a verified business profile
Legitimate hotels that message guests at scale use the official WhatsApp Business Platform. That gives the conversation a business profile you can tap open: the hotel's name, website, address and a display name that Meta has tied to a real, verified business. A scammer working from a personal number or a hastily made account can't reproduce that verified profile — they can copy a logo into an avatar, but not the underlying verification.
Before you trust a message, tap the contact at the top of the chat. A real hotel channel shows a proper business profile with matching details. A blank profile, a personal account, or a name that doesn't quite match the property is the first and clearest tell.
2. It continues a conversation you started — or expected
Genuine hotel messaging is part of a journey the guest is already on. You booked, you received a confirmation through the hotel's own channels, and the WhatsApp thread picks up from there: a welcome, your check-in window, a question about arrival time. The message references things you'd expect at that point in your stay.
Scams, by contrast, tend to arrive out of nowhere and immediately escalate to money. A first-ever message that opens with "there is a problem with your booking, pay now to keep it" is behaving nothing like a real hotel, no matter how accurate the booking reference looks.
3. It never rushes you toward a payment
This is the single most reliable signal, so it's worth being precise about it. As a security guideline, treat any urgent request for card details or an immediate transfer over chat as a red flag. Reputable hotels and platforms like Booking.com state they will not ask you to share full card numbers or "verify" your card by WhatsApp, SMS or phone, and a real booking is not cancelled because you took ten minutes to check.
(An honest caveat: some small, independent properties do informally ask for card details over chat because they don't have better tools. That's poor practice, not proof of a scam — but it's exactly why it's safer to pay through a secure, verifiable link than to type a card number into a message.)
When a legitimate hotel does need payment, it sends a secure payment link that opens a proper, recognisable checkout — not a lookalike page asking you to re-enter everything under a countdown timer. The tone is "here's a link when you're ready," not "act in the next 24 hours or lose your room."
4. It uses official channels, not a number pulled from a message
A real hotel is happy to be verified. Its WhatsApp number appears on its own website and in the confirmation you received directly from the hotel or platform. If you're ever unsure, you can look the hotel up independently and confirm — and a genuine hotel will never be offended that you did. The one number you should never trust is the one sent to you inside the suspicious message itself.
Does Booking.com contact you on WhatsApp?
This comes up constantly, so it deserves a direct answer. A hotel you booked through an OTA may legitimately message you — that's normal, and increasingly expected. But neither Booking.com nor a reputable hotel will use WhatsApp to demand card details, ask you to "re-verify" a payment that already went through, or threaten instant cancellation unless you pay through a link they've pushed. If a message does any of those things, the accuracy of your booking details doesn't make it real — it makes it a well-informed scam.
How hotels actually use WhatsApp (when they do it properly)
Understanding legitimate use makes the fakes obvious by contrast. Done well, hotel WhatsApp is proactive and service-led, not transactional and pushy:
- Before arrival: a warm welcome, directions, check-in times, and an easy way to share an arrival window or request something for the room.
- During the stay: answering the small questions instantly — Wi-Fi, breakfast hours, late checkout, a spare towel — the things that would otherwise mean a call or a trip to the desk.
- Around services: a restaurant reservation, a spa slot, an upgrade offered at the right moment, always with a clear, secure way to confirm.
- After checkout: a thank-you and a genuine invitation to return — not a surprise payment demand weeks later.
Notice what's absent from that list: urgency, threats, and out-of-the-blue requests for money. A proactive guest journey is the opposite of a scam's playbook, which is precisely why building the legitimate version well is the best defence against the fake one.
What hotels can do to stay unmistakably real
If you run a property, guest trust is now part of your job — and it's an opportunity. A few practices make your messages impossible to convincingly fake:
- Use a verified WhatsApp Business profile so guests can tap and confirm it's you.
- Publish your WhatsApp number on your own website and in every confirmation, so guests always have an independent source of truth.
- Adopt a clear "we'll never ask for card details in chat" policy — and tell guests so, ideally in your pre-arrival message. Turning a security warning into a friendly heads-up builds trust rather than fear.
- Take payments only through secure, branded links, never by asking guests to type card numbers into a message.
- Message proactively so guests recognise your voice and rhythm. A guest who already knows what your real messages feel like spots an impostor instantly.
The uncomfortable truth is that scams impersonating your hotel damage your reputation even when you did nothing wrong. The reassuring truth is that the same things that make guests love your communication — verification, consistency, a proactive and unhurried tone — are exactly what make you impossible to fake.
Frequently asked questions
What does a legitimate hotel WhatsApp message look like?
It comes from a verified WhatsApp Business profile you can tap to confirm, continues a conversation you started or expected, references the right stage of your stay, and never rushes you toward paying. When payment is needed, it arrives as a secure, branded link — not a lookalike page with a countdown.
Does Booking.com contact you on WhatsApp?
The hotel you booked may legitimately message you on WhatsApp, and that's increasingly normal. But neither Booking.com nor a reputable hotel will use WhatsApp to demand card details, ask you to "re-verify" a completed payment, or threaten instant cancellation unless you pay through a pushed link. Those behaviours signal a scam regardless of how accurate your booking details are.
Will a real hotel ever ask for payment on WhatsApp?
A reputable hotel takes payment through a secure link that opens a proper checkout, and won't ask you to share full card numbers in chat or transfer money to release a booking. As a rule, treat any urgent, in-chat request for card details as suspicious and verify through the hotel's official channels first.
How can I verify a hotel's WhatsApp number?
Check it against the number on the hotel's own website and in the confirmation you received directly from the hotel or booking platform. Look the property up independently if you're unsure — a genuine hotel is happy to be verified. Never trust a number or link supplied only inside the suspicious message itself.