Fake Hotel Listings: How to Verify Before You Pay

Yes — fake hotel listings really do appear on major booking platforms, and the platforms will not catch them all before you pay. In September 2026 alone, UK national newspapers reported fake listings on Booking.com for a Wetherspoons pub (The Independent and London Evening Standard) and a "flat" inside the Houses of Parliament at £81 per night (The Times). If a nonexistent pub and a parliamentary office can pass the platform's checks long enough to take bookings, so can the listing you are looking at right now.

That is not an argument to stop using booking platforms. They remain the safest place to pay for accommodation, because they hold your money and give you a dispute route. The argument is that you are the last line of verification — and verification takes about ten minutes.

This guide covers two things: how fake listings get onto major platforms in the first place (so you recognize the mechanics), and the verify-before-pay checklist that catches them before your money is gone.

Here is the whole method in one table. Every row is a real, checkable signal — not a vibe.

Red Flags vs Green Flags: The Listing Check at a Glance

One red flag is a reason to verify harder. Two or more is a reason to close the tab. There is always another listing.

How Fake Hotel Listings Get Onto Major Platforms

Understanding the mechanics matters, because each method has a specific counter-move. Fake listings are not magic — they are assembly-line fraud built from a handful of reusable parts.

1. Stolen photos from real properties

The classic method. A scammer copies photos from a real hotel — or from a real-estate listing, a wedding venue, an interior-design portfolio — and posts a fictional property around them. The address is real enough to place on a map; the building at that address has nothing to do with the "hotel." Because the photos are genuine pictures of a real place, they look convincing, and they often pass a platform's automated image checks.

Counter-move: the reverse-image search. Stolen photos are, by definition, photos that exist elsewhere. Finding where else they live takes about a minute, and it ends this scam entirely. Our deepfake and fake hotel photo guide covers what to look for when the images themselves are the fraud.

2. AI-generated property photos

Increasingly, scammers skip the stealing step and generate the hotel in seconds with an image model. The result is sharp, well-lit, professionally composed — a rooftop pool at golden hour, a suite with a view that does not exist anywhere on earth. The telltale signs are there if you know to look: shadows that fall in two directions, reflections that do not match their light source, railings or windowsills that end mid-air, text in the image that is almost but not quite readable.

AI-generated imagery has made the "too perfect" photo a warning sign rather than a selling point. Real hotel photography is full of compromises — a fire extinguisher on the wall, a window that faces a car park, a minibar from 2014. When every image looks like a render, assume it is one until proven otherwise.

Counter-move: the live video request. Ask the host or property to show you the room in a brief video call — two minutes, the view, the bathroom, the front entrance. A legitimate host can do this easily. A scammer holding only generated images cannot. More on this in our Airbnb-specific fake listing guide.

3. Address spoofing and landmark bait

A listing claims a prime address — overlooking the marina, steps from the old town, "in the heart of" whichever district you searched — but the pinned location is a residential block, a construction site, or an address that does not exist. The scam works on travelers who book by neighborhood rather than by property, and who never zoom into Street View to see what is actually at the pin.

Counter-move: Street View. Drop the listing's exact address into Google Maps and look at the building. A real hotel has signage, a lobby entrance, a booking footprint. If the pin sits on a flat in a housing estate or an empty lot with a for-sale sign, the listing is fiction.

4. Lookalike and homoglyph URLs

Sometimes the fake is not the listing at all — it is the page you pay on. Scammers register domains that differ from a real booking platform or hotel brand by one character: a zero where an "o" should be, a Cyrillic letter that renders identically to a Latin one, an added hyphen or word (booking-dubai.com, secure-hotel-payments.net). The Guardian flagged this homoglyph attack pattern in mainstream consumer coverage in September 2026, and it is now standard equipment in travel fraud.

You usually arrive through a paid search ad or a message link. The page is a pixel-perfect copy of the real booking flow. You enter your card details, and you have just paid a scammer — or handed over credentials that will be used against the real account. We break down the platform-versus-direct decision, including when direct booking is and is not safe, in Booking.com vs Airbnb vs direct booking scam risk.

Counter-move: type URLs yourself and read the address bar character by character. Details below in the checklist.

5. The off-platform payment trap

The most reliable scam in the fake-listing economy does not need fake photos at all. It needs a real listing, a friendly host, and one request: "Pay me directly to avoid platform fees." Bank transfer, Wise, Revolut to a personal account, cryptocurrency, gift cards, a payment link in a WhatsApp message. Every route shares one property — the money cannot be recovered.

The U.S. Federal Trade Commission's December 2025 Data Spotlight reported nearly 65,000 rental scam reports totaling about $65 million in losses since 2020 — and noted that most scams are never reported to a government agency, so the real figure is likely far higher. The through-line in that data is consistent with what we see in hotel fraud: the payment channel is the scam. Fake listings, cloned sites, and AI photos all converge on the same destination — money sent somewhere the platform cannot see or refund.

Counter-move: never pay outside the platform or the property's verified official site. This one rule eliminates the majority of accommodation fraud by itself. The pattern is the same one we document in the Vrbo scam red flags guide: the listing may be real, but the moment the payment goes off-platform, your protection is gone.

6. Compromised host accounts and phishing "reconfirmations"

The newest pattern inverts the old one. You book a real hotel on a real platform. Then a message arrives — through the platform's own messaging system, which is what makes it convincing — saying there was a card error or a problem with your reservation, with a link to "reconfirm your payment." The link leads to a cloned page that harvests your card details.

The message is convincing because it arrives inside a system you trust, often from an account that was itself compromised through exactly this kind of phishing. Travel trade press has documented the structural scale of stolen booking data; the practical point for you is that a payment problem is never fixed through a link in a message.

Counter-move: never re-enter payment details from any message link. Open the platform's app yourself or type the URL directly and check your reservation status there. A real payment problem will be visible in your account. See Booking.com WhatsApp scams for how this channel-shift plays out in practice.

The Verify-Before-Pay Checklist

Work these steps in order on any listing that is about to take your money. Total time: about ten minutes. Total cost: nothing.

Step 1: Reverse-image search at least three photos

Take the listing's three best photos — the hero shot, a room interior, the view — and run each through Google Images or a dedicated reverse-image tool.

• Photos found on unrelated sites (a real-estate listing in another city, a stock photo library, a wedding venue's portfolio): the listing is stolen. Close it.
• No results at all, plus AI telltales: treat as unverified until a live video call confirms the property exists.
• Photos trace to the property's official site or dated guest photos: green flag.

Step 2: Verify the address on Street View

Copy the exact address into Google Maps. Zoom to street level and look at what is actually there — how to verify the hotel's address before you book in more depth, including the address-bait pattern where a "prime location" pin lands on a residential block. Then sanity-check the neighborhood: does the claimed location match the price? A "luxury suite steps from the marina" at a fraction of the going rate for that street is not a deal — it is bait.

Step 3: Cross-check the property on a second channel

A real hotel almost always has more than one footprint: the platform listing, its own official website, a second major platform, a Google Business Profile with photos and reviews contributed over years. Compare the photos and the address across channels. If the same property appears on two independent platforms with identical photos and address, you are almost certainly looking at a real building. If it exists on exactly one platform and nowhere else, ask why.

Step 4: Read recent reviews for specifics, not scores

Sort by newest and read critically. Genuine reviews are full of unglamorous specifics: a receptionist's name, the elevator being slow, the breakfast eggs, the noise from the bar next door, which room to request. Fake review clusters read like ad copy — superlatives, no details, often posted in bunches. Also check whether the property responds to negative reviews; a real hotel defends its reputation.

Step 5: Confirm the payment path before you commit

Decide now, before you are emotionally invested in the booking: you will pay on the platform, or on the hotel's official website (reached by typing the URL yourself), by credit card. Write off every other route in advance — wire transfer, crypto, gift cards, payment apps to personal accounts, links sent in messages — so that when the request comes (and on a fraudulent listing, it will come), the decision is already made.

Step 6: Inspect the URL — the homoglyph check

Before you enter a single card digit, read the address bar character by character:

1. Type the platform's URL yourself. Never reach a payment page through a search ad, an email link, or a message link. Paid ads above brand-name searches are a known delivery vehicle for cloned booking sites.
2. Check for added words and hyphens. hotelname-booking.com and hotelname-dubai.com are not the hotel.
3. Check for character substitution. A zero for an "o", a one for an "l", or a visually identical character from another alphabet (the "homoglyph" trick) is invisible at a glance. If anything looks slightly off, copy the URL into a plain-text note and examine it letter by letter.
4. Confirm the certificate context, but do not rely on it. A padlock icon only means the connection is encrypted — a scammer's cloned site gets one too. The padlock is not a legitimacy signal.
5. Compare against the address you know. The domain must match the platform or hotel you intended, exactly.

If you cannot tell whether you are on the real site, you are not on the real site. Close the tab and start over.

Step 7: If anything is still uncertain, make the call

For hotels, the front desk is the ground truth. Find the hotel's phone number through an independent search — not from the listing or the booking site you are on — and ask them to confirm the property details, or your reservation if you have already booked. Three minutes, free, decisive. Vacation rentals do not have a front desk, which is why the live video walk-through exists as the equivalent test: ask the host to show you the entrance, the view, and one specific room detail from the listing, in real time.

The full version of this sequence, adapted for rentals, lives in our verify-any-vacation-rental guide and the broader safe booking checklist.

Scam listings rotate constantly — new cloned domains, new AI photo tricks, new reasons hosts invent to move you off-platform. If you would rather get a short heads-up when a new hotel-booking scam pattern starts circulating than discover it on your own trip, this is exactly what our free travel-safety newsletter tracks:

👉 Get Free Alerts — avoidtravelscam.com/newsletter/

It takes under a minute to join, and the first alert that saves you a deposit has paid for itself.

What Mainstream Coverage Misses — and What We Add

The September 2026 wave of UK press coverage proved the problem is real: fake listings on major platforms, published fast enough to take bookings, sometimes in buildings that are nationally famous landmarks. That reporting did its job — it made noise, and the platforms responded.

But news coverage of a specific fake listing has a short shelf life, and the definitional explainers (what a "homoglyph" is, in the abstract) are already owned by general-security outlets. What travelers still cannot find anywhere — and what this page is built to be — is the applied, reusable checklist: the ten-minute sequence that works on any listing, on any platform, next month, not just on the story of the week.

That is the standard we hold ourselves to at AvoidTravelScam: not retelling the scam du jour, but giving you the verification procedure that outlasts it. Platforms change their fraud filters. Scammers change their domains. The checklist does not change, because it tests reality (the building, the photos, the payment route) rather than trusting presentation (the listing, the reviews, the confirmation email).

What to Do If You Already Paid

If you have run the checks too late and the listing was fake:

1. Stop paying. No legitimate resolution starts with more money changing hands.
2. Contact the platform from the official app immediately. Use in-app support, not a number from the listing or the door. The platform can rebook you and can refund a fake listing it hosted.
3. Dispute the card charge. If you paid by credit card on-platform, a nonexistent property is a services-not-received dispute. If you paid off-platform, still report it to your bank — fast action sometimes freezes the receiving account.
4. Document everything. Screenshots of the listing, every message, payment receipts, the address. Take photos of the building when you arrive.
5. File a police report. You will need the report number for insurance and card claims, and it feeds the data that platforms and authorities use to take scam networks down. In the U.S. you can also report at ReportFraud.ftc.gov.
6. Change credentials if you entered them on a cloned site. Assume the card is compromised and freeze it; if you typed a platform password into a lookalike page, change it everywhere it is reused.

Frequently Asked Questions

Can fake hotels really appear on Booking.com and other major platforms?

Yes. Fake and misrepresented listings appear on major booking platforms, not just classified-ad sites. In September 2026, UK national press reported fake listings on Booking.com for a Wetherspoons pub (The Independent, London Evening Standard) and a "flat" in the Houses of Parliament at £81 per night (The Times). Platforms remove most fakes eventually, but listings can survive long enough to take payments — so the verification burden falls on you, before you pay, not on the platform after you have been scammed.

How do I verify a hotel listing before paying?

Run five checks in order: (1) reverse-image search at least three listing photos — stolen or AI-generated images are the top giveaway; (2) check the address on Google Maps and Street View — a real hotel has a matching building and signage; (3) read recent reviews for specific details (staff names, room numbers, breakfast details) rather than generic praise; (4) confirm the payment path — pay on the platform or the property's official site by credit card, and treat any push to wire transfer, gift cards, or a payment link sent in a message as the scam revealing itself; (5) inspect the URL character by character for lookalike or homoglyph domains before entering card details.

What is a lookalike or homoglyph booking URL?

A lookalike (or homoglyph) URL is a web address designed to be mistaken for a real one. Scammers register domains that differ from a genuine hotel or booking platform by a single character — a zero for the letter "o", a Cyrillic "a" that renders identically to a Latin one, an added hyphen or word like "booking-dubai" or "secure-". You arrive through a search ad or message link, see a page that looks exactly like the real booking flow, and enter your card details into the fake. The defense is to never reach a booking page through an ad or a message link: type the platform's URL yourself, and read the address bar character by character before paying.

Should I ever pay a hotel or host directly instead of through the platform?

No — not when the listing is on a booking platform. When a host or agent asks you to pay "directly to save fees", by bank transfer, cryptocurrency, gift card, or a payment link sent over WhatsApp, email, or SMS, you are being moved out of the one channel where your money is protected. Platform payments can be disputed and refunded; wire transfers and gift cards effectively cannot. The moment payment leaves the platform, the listing's photos and reviews stop mattering — you are now trusting a stranger with no recourse.

What should I do if I arrive and the hotel has no record of my booking?

Do not pay anyone on the spot to "fix" it. Take photos of the address, keep every message and the listing screenshots, and contact the booking platform's support line immediately from the official app — use the in-app support number, not a number the person at the door gives you. If you paid by credit card, dispute the charge as services not received. If you paid outside the platform, report it to the platform, your bank, and the local police — you will need the police report number for any insurance or card claim.

Most hotel bookings — the overwhelming majority — are completely fine, and booking platforms remain the safest way to pay for accommodation. The fake-listing economy lives in the gap between what a platform verifies and what a traveler assumes. That gap closes with ten minutes of work: three reverse-image searches, a Street View check, a read of the recent reviews, and a firm rule about where your money goes. Do that, and the room will be there when you arrive.

Sources

• FTC Data Spotlight, "Rental scams hit home with $65 million in reported losses" (December 2025): nearly 65,000 rental scam reports and about $65 million in reported losses since 2020; most scams are never reported to a government agency. ftc.gov
• The Times (September 2026): Booking.com listing offering a "flat" in the Houses of Parliament at £81 per night.
• The Independent and London Evening Standard (September 2026): tourists duped by a fake Wetherspoons pub listing on Booking.com.
• The Guardian (September 2026): consumer guidance on spotting and avoiding homoglyph (lookalike-domain) attacks.
• PhocusWire (September 2026): travel's stolen-data problem — why cybercriminals target booking details.
• AvoidTravelScam related guides: fake hotel photos and AI-generated listings, fake Airbnb listing signs, Vrbo scam red flags, verify any vacation rental, safe booking checklist, Booking.com vs Airbnb vs direct booking, verify the hotel's address before you book.

AvoidTravelScam publishes practical travel-safety guides. No affiliate links. No sponsored content. Just what you need to know before you go. Want scam alerts for your route? Get Free Alerts →