Email compromised, booking.com

flaneurs_lobster

Ah, just clicked(!) what people are referring to (I think). It's not that booking.com has leaked booking details, rather the hotel's system has received the booking and that has leaked enough information (name, booking dates, reference, email) for crook to send a "we need to charge you upfront for something - click here to make payment" email.

Is that right?

outtatune

Yep, often it's a 'tourist tax' - something like €5 per night per person: low enough to sound believable and to nudge people into thinking 'I'd better pay it or I might turn up and discover they've cancelled my booking'.

Of course the hotel never finds out they've had their booking data hacked, because nobody mentions it to them in case the hotel realises it was a genuine charge that they forgot to include, and charge it at checkout!

missile

I had similar with Booking.com. Booking.com and got BS. I contacted the hotel directly and cancelled the reservation.

tetrarch

https://forums.moneysavingexpert.com/discussion/comment/82171478#Comment_82171478

Exactly - "click here to confirm details" etc

Regards

Tet

virgo17

https://forums.moneysavingexpert.com/discussion/comment/82171625#Comment_82171625

Exactly this. My wife had exactly the same a month or so back.

paul2louise

So I deleted all the booking.com stuff but I did report to clear pay that I wasnt happy about my email being used in any details with them.

I got this reply. Do I have to give them any of this. The person who made this booking set up a clear pay account to pay for this hotel using my email. I just asked them to just remove any of my email details from their system.

Hi there,

Thanks for reaching out to us.

To commence the investigation, could you please provide the following:

- Your full name

- Mobile phone number

- Full home address

- Date of Birth

- Email address

We collect and handle personal data in accordance with our Privacy Policy

flaneurs_lobster

https://forums.moneysavingexpert.com/discussion/comment/82172140#Comment_82172140

I wouldn't have engaged with Clearpay at all (unless I had an existing account). Unlikely that there's an account set up using your email, unless you are receiving emails direct from Clearpay rather than notification of payment methods from booking.com. Do you have any other evidence for this?

Anyone can use any email address they like when signing up for anything, their own, someone else's (by mistake or design) or non-existent. Any competent system, and certainly any financial system, will be verifying that email in the usual way.

Grumpy_chap

https://forums.moneysavingexpert.com/discussion/comment/82172140#Comment_82172140

I am a bit confused as to who stands to gain what and how here.

If I set up a payment account with clear pay using Paul2Louise email, I can't pay for anything unless I add funds to the account. In addition, I don't receive any messages about the payment account.

Clearly I am missing something salient.

JSmithy45AD

https://forums.moneysavingexpert.com/discussion/comment/82172217#Comment_82172217

Only in reverse as far as I can see. Unless 2FA has been enabled, asking for a password reset should enable the OP access to the account (presuming it does exist). If they could get into it they could possibly ask to delete the account from there.

Vitor

Send an email to privacy@clearpay.co.uk, marked for attention of Data Protection Office and say you wish to exercise your right to erasure under Article 17 of the UK GDPR and they must erase the personal data held about you linked to the email.