Is it normal for a hotel to ask for card verification by WhatsApp?
No. A genuine hotel won't ask you to 're-verify' full card details or codes via WhatsApp, SMS, or email links.
Last reviewed: 1 June 2026
Explanation
Hotel phishing scams message guests claiming a payment problem and ask them to confirm card details — sometimes quoting a real booking reference taken from breached platform data. Legitimate hotels and booking platforms handle payments through their secure systems and don't need your full card number, CVV, or one-time codes via a chat link.
Common red flags
- Requests to 're-verify' full card details or CVV via a link
- Real booking details used to seem genuine
- Urgent 'verify now or lose your booking' pressure
- Links to non-official domains
What to do now
- Don't click or enter details
- Verify your booking via the official app or phone number
- Call your bank if you already entered card details
Frequently asked questions
Why does the message know my booking reference?
Scammers exploit breached booking-platform data. A real reference doesn't prove a message is genuine — verify through the official app or phone number.