"Please Verify Your Hotel Booking": The Scam Singapore Police Warned About This Month

2026-10-23 · Philip Choo · AI9OS

You booked a hotel for the school holidays. A WhatsApp message arrives from "the hotel". It has your name, the hotel's name and your check-in date. There is a small problem with your card, it says. Please verify your booking through this link, or the reservation may be cancelled. Don't worry, nothing will be charged.

Everything in it is right except the sender.

What the police said

On 9 October 2026 the Singapore Police Force issued an advisory on exactly this. Since January 2026 there have been at least 148 cases, with losses of at least S$185,000.

The pattern the police describe:

• Scammers pretend to be a hotel or a booking platform, mostly over WhatsApp or email.
• They ask you to verify your card details or confirm an upcoming booking.
• Some messages include your real booking details, which is what makes them believable.
• The link leads to a fake page. You are told no money will be taken. You enter your card details and approve the transaction.
• Most people only find out when strange charges appear on their card, or when they call the hotel and the hotel has no idea what they mean.

Why your real booking details are no comfort

Most of us use a simple test: would a scammer know this? If the message knows the hotel, the dates and your name, it feels like it must be genuine.

That test fails here. The details make the message believable; they do not make it real. Once a fraudster has your booking details, the rest of the message is easy to fake. Knowing your booking is not proof of being the hotel.

The one habit that beats it

Never act on the link in the message. Go to the hotel yourself.

The police advice is to contact the hotel only through the contact details on its official website, and not to click links in messages you did not expect. In practice:

1. Close the message. Do not reply to it.
2. Open the hotel's official website, or the booking app you actually used, by typing it in yourself.
3. Ask them: is there really a problem with my booking?

If there is a genuine problem, the real hotel will tell you. If there is not, you have just avoided being one of the next 148.

Three settings worth turning on today

The police advisory also suggests:

• Install the ScamShield app and turn on security features such as transaction limits and two-factor or multi-factor authentication on your banking.
• Never share your card details, bank details or one-time passwords (OTPs), whoever seems to be asking.
• If you are unsure about a message, check it with the ScamShield app or the ScamShield helpline before you do anything.

A low transaction limit on the card you use for travel bookings is cheap insurance. It does not stop the scam, but it caps what the scam can take.

If you have already clicked

Move fast, in this order:

1. Call your bank and report the fraudulent transactions straight away.
2. Make a police report.
3. Tell your family and friends, especially anyone travelling soon. The same message is going to other people.
4. Report the fake account or message to the platform it came through.

If the money left through a phishing link, Singapore's Shared Responsibility Framework may decide whether your bank or telco shares the loss, and it runs on short deadlines. Report early.

The short version

The message knows your booking. That is the scam, not the proof. Close it, open the hotel's own website, and ask.

This is general information based on the Singapore Police Force advisory of 9 October 2026, not legal or financial advice about your situation.

Source

• Singapore Police Force, "Police Advisory on Phishing Scams Involving Hotels and Hotel Booking Platforms", 9 October 2026, police.gov.sg.