Your front desk team is facing a threat they probably don't know exists yet.
AI-powered booking scams aren't the clumsy phishing emails of 2015 with typos and broken English. These are eerily convincing messages, fake listings with flawless imagery, and voice calls that sound exactly like your reservations manager : because they're using AI voice cloning technology pulled from a 30-second Instagram video.
Tripadvisor caught two million fake reviews in a single year. Booking.com is fighting a constant war against fraudulent listings that look more legitimate than some actual hotels. And your guests? They're walking into your lobby confused, angry, or worse : victims of a scam that originated from what they thought was a message from you.
This isn't theoretical. It's happening right now, and your front desk is the first line of defence.
How These Scams Actually Work
Let's break down the most common AI-powered attacks your team needs to recognise.
Fake Listings with AI-Generated Photos
Scammers are using AI image generators to create stunning hotel room photos that don't exist. They'll clone your branding, slightly alter a booking platform URL (think "booking-secure.com" instead of "booking.com"), and list a property that looks legitimate. The photos? Perfect. The reviews? Glowing. The hotel? Non-existent.
Guests book, pay a deposit, and only discover the scam when they arrive at an address that's either a car park or someone else's hotel entirely.
Phishing Messages That Look Identical to Real Ones
AI tools can now replicate the exact formatting, tone, and branding of legitimate booking platform messages. A guest receives an email that looks like it's from Booking.com asking them to "verify their payment details" or "confirm their reservation" by clicking a link.
The link goes to a near-perfect clone of the booking platform's login page. They enter their card details. Game over.
Voice Cloning : The Truly Scary One
Here's where it gets properly unsettling. Scammers can take a short audio clip : say, from your hotel's Instagram story or a YouTube video : and use AI to clone your voice. They'll call guests directly, claim there's an issue with their booking, and request "urgent payment verification" via wire transfer.
Guests hear what sounds like you. The accent's right. The phrasing feels familiar. They comply.
We've seen this hit hotels where the GM has a public-facing video on the website. Within weeks, their voice was being used to scam guests.
AI-Generated Fake Reviews by the Thousands
Fake review farms used to be slow and obvious. Now? AI can generate hundreds of convincing, varied, human-sounding reviews in minutes. These flood platforms, pushing fraudulent listings up in search rankings while real hotels with genuine reviews get buried.
Red Flags Your Front Desk Team Needs to Know
Train your staff to spot these warning signs during check-in or when fielding guest inquiries:
The Guest Seems Genuinely Confused
They arrive with a confirmation email that looks legitimate but has booking details that don't match your system. They're not trying to scam you : they've been scammed, and they don't know it yet.
Ask calmly: "Where did you originally find our hotel?" and "Can I see your booking confirmation email?"
Unrealistically Perfect Images or Generic Reviews
If a guest shows you a listing with photos that look like they came from an interior design magazine but don't match your actual rooms : that's a red flag. Same goes for reviews that read like marketing copy rather than real guest feedback.
New or Suspicious Guest Accounts
Booking platforms show account creation dates. If a guest's account was created hours before making a reservation, or if their profile has zero previous bookings, that's worth a second look.
Requests to Verify Payment Outside the Platform
No legitimate booking platform will ask guests to confirm payment details via email, SMS, or phone call. If a guest mentions receiving such a request : especially one claiming to be from you : it's a scam.
Last-Minute Bookings at Suspiciously Low Rates
Scammers often use fake listings with rates far below market value to lure victims quickly. If someone walks in expecting a £50-per-night rate you've never offered, dig deeper.
What to Do When You Spot a Scam Victim
First: don't make them feel stupid. They've just been conned by technology designed to fool even savvy travellers.
Here's your immediate action plan:
-
Pull up your actual booking system and confirm whether they have a reservation. If they don't, explain calmly that it appears they've been targeted by a fraudulent listing.
-
Collect evidence. Ask to screenshot their confirmation email, the listing they used, and any payment receipts. Forward this to the relevant booking platform's fraud team and to Action Fraud (UK's national fraud reporting centre).
-
Help them take action. Guide them to contact their bank immediately to dispute the charge and report the fraud. Provide them with your hotel's legitimate contact details and booking platform profile.
-
Document everything. Keep an internal log of scam attempts targeting your property. If you spot patterns (same fake listing URL, same payment request tactic), report it.
-
Offer a gesture if you can. You're not obligated, but if you have availability, offering a discounted genuine booking can turn a nightmare situation into a story they'll tell positively. It also keeps them from blasting you on social media out of frustration.
How to Protect Your Hotel (and Your Guests)
Verify Your Own Listings Regularly
Search for your hotel on major booking platforms every few weeks. Look for duplicate listings, fake versions with similar names, or properties using your photos without permission. Report them immediately.
Add a Fraud Warning to Your Confirmation Emails
Include a simple line in every booking confirmation: "We will never ask you to verify payment details via email or phone. If you receive such a request, contact us directly using the number on our website."
Train Your Team on AI Scam Tactics
Run a 15-minute briefing during your next team meeting. Show examples of fake emails, fake listings, and voice cloning scams. Make sure everyone knows what to watch for and how to respond.
Use Multi-Factor Authentication Everywhere
Enable MFA on your booking platform accounts, PMS, email, and any system that holds guest data. It's the single most effective way to prevent account takeovers that lead to guest-facing scams.
Monitor Your Brand Mentions
Set up Google Alerts for your hotel name + terms like "scam," "fake," or "fraud." If guests are getting targeted by fake listings using your name, you'll know quickly.
Keep Your Direct Booking Channels Obvious
Make sure your website and social media profiles have clear, prominent contact details. When guests search for your hotel and see multiple results, they should be able to easily identify the real you.
The Bigger Picture
Booking.com and other platforms are fighting back with their own AI-powered fraud detection systems : analysing traffic patterns, flagging suspicious accounts, and blocking dodgy listings before they go live. But scammers are adapting just as fast.
This isn't a problem that's going away. It's an arms race, and your front desk team is right in the middle of it.
The good news? Awareness is 90% of the battle. A team that knows what to look for can catch most scams before they escalate. A guest who's warned about fake payment requests won't fall for them.
Print this out if you need to. Stick it behind the desk. Forward it to your reservations team. Just make sure your people know what they're up against.
Because the scammers aren't slowing down : and neither should you.
Leave a Reply