The most expensive hotel room you will ever book is the one that does not exist. Fake booking sites now clone real platforms down to the pixel, vacation-rental scammers reuse stolen photos, and pressure tactics push travelers into paying outside the systems that protect them. The Federal Trade Commission’s 2026 guidance keeps coming back to one habit: slow down at exactly the moment the deal tells you to speed up.
Here is the red-flag checklist – and what each flag actually means.
| Red flag | What is really happening | What to do |
|---|---|---|
| Price far below every other site | Bait listing or cloned site harvesting card details | Compare the property’s own website rate; if the deal is not mirrored anywhere, walk |
| “Pay outside the platform to save the fee” | Classic vacation-rental scam – off-platform payment kills your protection | Refuse; book and pay only through the official platform |
| Wire transfer, gift card, crypto, or a “friend’s” payment app | Untraceable payment = no refund path | Card or platform payment only |
| Urgency: “2 people looking”, expiring in minutes | Pressure scripts suppress verification | Close the tab; real inventory rarely vanishes in 10 minutes |
| New listing, perfect photos, no review history | Stolen photos from other listings | Reverse-image search the photos; check the address on maps and street view |
| Domain almost right (“marriot-hotels-deals.com”) | Clone site built to steal logins and card data | Type the brand’s URL yourself; check the domain character by character |
| QR code in an email or ad “for your booking” | QR phishing routes you to the clone site | Open the brand’s site directly instead |
| Host insists on switching to WhatsApp/email before booking | Takes the conversation off the platform’s fraud radar | Keep all communication in the platform’s inbox |
The Five-Minute Verification Habit
- Search the name plus “scam”, “review” or “complaint” – the FTC’s own advice before paying any travel company, rental agent or hotel.
- Verify the property exists where it claims to exist. Street view the address; a “beachfront villa” pointing at a parking lot tells you everything.
- Read reviews for specificity. Real reviews mention details – the elevator, the breakfast, the street noise. Fabricated ones stay vague and gushing.
- Pay by card on the official platform. Card chargeback rights and platform guarantees are your only real safety nets.
- Screenshot everything – listing, messages, receipt – the moment you book. Fraud claims move faster with evidence.
If You Already Paid
Contact your card issuer immediately and dispute the charge – speed matters for chargebacks. Report the site to the FTC and to the real platform being impersonated, which can pull the clone faster. And if the “hotel” turns out to be real but full, you are in the overbooking zone, not necessarily a scam – different remedy, different paperwork.
The Bottom Line
Every travel scam runs on the same engine: a price or pressure that makes you skip verification. Pay only on platforms, verify addresses and photos, and treat “too cheap to be true” as a technical specification, not a sales line. The five minutes of checking is the cheapest travel insurance you will ever buy.
Speaking of insurance: our breakdown of what travel insurance actually costs covers the real safety net, and the resort fees guide covers the legal way hotels overcharge you. More booking-side advice sits in our flight booking tips section.