How to identify and prevent fake booking messages
Thermana dd never asks guests to confirm a reservation or make a payment via links sent via SMS messages, WhatsApp, Viber or other messaging channels.
In an era of increased online fraud, individuals may be targeted by fraudulent messages regarding their reservations. Such messages are often very convincing, as they may contain reservation details, guest names, or other information that creates a false impression of authenticity.
How does the scam work?
Attackers may pose as a hotel, accommodation provider, or other trusted organization. They send a message to the guest urging them to:
- to confirm the reservation,
- to a surcharge or additional payment for a service,
- to confirm payment details,
- to re-enter payment card details,
- to opening a link due to the alleged confirmation of the reservation.
Such messages typically contain a web link that leads to a fake website where the user is asked to enter personal or payment information.
Be especially careful when the message:
- mentions your actual reservation or date of stay,
- requires reconfirmation of the reservation or re-entry of data,
- requires an additional payment, deposit or surcharge,
- contains a link to enter personal or payment information,
- creates a sense of urgency, requires immediate action and warns of the possibility of cancellation of the reservation,
- encourages you to continue communicating outside of normal communication channels,
- contains language and grammatical errors or unusual web addresses (URLs).
Recommendations for guests and prevention of abuse
- Do not click on links in suspicious messages (SMS messages, emails, WhatsApp, Viber).
- Do not enter payment card information via links received in unverified messages.
- Verify the authenticity of messages: Always verify the authenticity of the request before making any payment.
- Use official channels: make reservations, payments and other requests exclusively through the officially published communication channels of Thermana dd.
- Protect passwords and codes: never provide passwords, one-time verification codes (SMS OTPs), or other security information to unknown persons.
What to do if you receive a suspicious message or suspect abuse?
- Do not perform the activities in the message: Do not open links, do not enter data, and do not make payments.
- Check the authenticity with Thermana dd: If in doubt, please contact us directly via the officially published contact details:
- Contact your bank: If you have already entered your payment card details on a suspicious website or made a payment, immediately notify your bank or card issuer and request that the card be blocked or appropriately protected.
- Change your passwords: If you entered your password on a fake site or if you use the same password for other services, change it immediately.
- Notify the Data Protection Officer (DPO): If you believe that your personal data has been misused or used improperly, please contact the Data Protection Officer at: op.pooblascenec@thermana.si.
- Reporting to the competent authorities:
- You can forward a suspicious message to the National Cybersecurity Response Center SI-CERT at: cert@cert.si.
- If necessary, you can file a report with the Information Commissioner of the Republic of Slovenia.
- In the event of financial damage, abuse or attempted fraud, report the matter to the Police.
