Asset 20 8 2
Does AI recommend your business? Run the free check →

Join 15,000 business owners, marketers and entrepreneurs. The Sunday newsletter you'll be annoyed only arrives once a week.

Article

Is Booking.com Legit? Refunds, Payments and Fake Messages (2026)

Booking.com is a real travel booking site, part of Booking Holdings and based in Amsterdam. According to its own terms, though, it runs the platform but isn't a party to your contract with the hotel or host, so cancellation, refunds and payment rules come from each property. The risk to watch is fake messages and fake listings that use its name.

Booking.com is one of those sites most of us have used without a second thought, so it's odd to see so many people typing the question into Google. Usually it comes after a strange message about a reservation, or a hotel that asked for a card number by WhatsApp. I've read Booking.com's own terms and safety pages so you can see what the company says it does, who is responsible when something goes wrong, and how to tell its real messages from the fake ones.

Who runs Booking.com

Booking.com describes itself as part of Booking Holdings Inc., founded in 1996 in Amsterdam, with its headquarters in the Netherlands. It says it has more than 28 million total reported accommodation listings, including over 6.6 million homes, apartments and other unique places to stay, and that the site is available in 43 languages.

That's a long-established company with a named parent, a published address and published terms. Wikipedia describes it as a Dutch online travel agency and says it sits inside what's now Booking Holdings. A site with that history is very different from a one-page look-alike that appears for a week and vanishes.

What Booking.com is, and what it isn't, in your booking

This is the part that surprises people. Booking.com's terms say it provides and is responsible for the platform, but not the travel experience itself. For accommodation, the terms say your contract is directly with the service provider, which means the hotel or host, and that Booking.com is not a contractual party.

In plain English, Booking.com is the shop window and the payment route, and the property is the one who has to give you the room. If the room is dirty, the pool is closed or the host cancels, your contract is with them, and the terms say the provider is solely responsible for the travel experience. That doesn't mean Booking.com ignores complaints, but it does tell you where the legal responsibility sits.

How payment works on Booking.com

Booking.com's terms explain that, depending on the booking, either Booking.com organises the payment or the property takes it, often at check-in or check-out. They also say upfront payments may be non-refundable, and that you should read the property's upfront payment policy before you book, because Booking.com doesn't control it.

  • Read the payment line in your confirmation before you pay anything.
  • Pay only what the booking confirmation and property policy describe.
  • Keep payments inside the official app or website where you can.
  • Screenshot the policy at the time you book, in case it's disputed later.

Cancellations and refunds on Booking.com

The terms say refunds and cancellation or no-show fees depend on the service provider's cancellation or no-show policy. So a free cancellation rate is free only within the window that property set, and a non-refundable rate stays non-refundable. The deadline in your confirmation email is the one that counts, not what a friend remembers from last time.

Booking.com's help pages say that if a property cancels, for example after an overbooking, Booking.com refunds and cancels the booking. Refund timing varies by payment method and bank, and different help pages quote different timescales, so I won't give you a number here. Check the page in your own booking and contact the property as well as Booking.com if you haven't heard back.

If your trip involves a flight that gets cancelled or delayed, that's a separate legal route. My guide to claiming flight delay compensation yourself covers that side of travel, because a hotel booking doesn't cover it.

Fake Booking.com messages and listings

This is where most of the trouble comes from. Booking.com's traveller safety page says phishing messages often claim to come from the accommodation or from Booking.com, include real-looking booking details, and push urgent requests to share payment information again. It says plainly that Booking.com will never ask you to share credit card details by email, over the phone, through text or WhatsApp.

The same page lists red flags you can check in seconds:

Work with me

Want AI doing the heavy lifting in your marketing?

I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.

  • A demand to transfer money to a bank account within 24 hours.
  • A request to pay with gift cards, which it says legitimate transactions never need.
  • A listing priced far below similar properties, which it calls a common red flag.
  • A link that doesn't match your booking confirmation.

If you're unsure, the advice is to contact Customer Service before you act, using the official app or website rather than the details in the message. Open the app yourself and check the booking there instead of clicking.

What to do if you think you've been caught out

Booking.com's safety page says to contact Customer Service immediately and say you may have been scammed, so the report reaches its security team. It also says to reset your Booking.com password, turn on two-factor authentication in the security settings, and contact your bank or payment provider, who can block cards and look at unrecognised charges. If you're in the UK, Action Fraud is the place to report it, and in the US it's the FTC.

What regulators and the press have said about Booking.com

Large travel sites attract scrutiny, and Booking.com is no exception. According to Wikipedia, Texas sued Booking Holdings in 2023 over alleged deceptive pricing practices, and in 2020 the Dutch Data Protection Authority fined Booking.com 475,000 euros for late reporting of a data breach. Those are allegations and a fine reported by a reference source, not a verdict on every booking you'll ever make, and I'd read them as a reminder to check the final price and policy before you pay.

Booking.com at a glance

What I checkedWhat Booking.com's own pages say
OwnerPart of Booking Holdings Inc.
Founded1996, Amsterdam
Contract for a stayDirectly with the hotel or host, per the terms
Refunds and cancellation feesSet by each property's policy
Card details by messageIt says it will never ask by email, phone, text or WhatsApp
If you've been scammedContact Customer Service, reset password, tell your bank

So, is Booking.com legit?

Yes, it's a real company that takes real bookings for real properties. The things to hold in your head are that your stay contract is with the property, that the cancellation rules belong to the property, and that fake messages in Booking.com's name are the real hazard. Before a trip it also helps to sort the small stuff, like a data plan, which I cover in my guide to the best eSIM for international travel, and a bag you won't regret, using my business trip packing list.

Frequently asked questions

Is Booking.com legit?

Yes. Booking.com says it's part of Booking Holdings Inc., founded in 1996 in Amsterdam, with published terms and a safety page. The key point is that your stay contract is with the hotel or host, not with Booking.com.

Who owns Booking.com?

Booking.com describes itself as part of Booking Holdings Inc. Its headquarters are in Amsterdam, Netherlands.

Is Booking.com responsible if my hotel cancels or the room is bad?

Its terms say the service provider is solely responsible for the travel experience and that Booking.com is not a contractual party for accommodation. Its help pages say that if a property cancels, Booking.com refunds and cancels the booking.

Will Booking.com ask me for card details by WhatsApp?

Its safety page says it will never ask you to share credit card details by email, over the phone, through text or WhatsApp. Treat any such request as a warning sign and contact Customer Service through the official app.

What should I do if I get a suspicious Booking.com message?

Don't click the link. Open the Booking.com app or website yourself, check the booking there, and contact Customer Service if you're unsure. If you've shared details, reset your password, turn on two-factor authentication and tell your bank.

Published and maintained by the Lilach Bullock team, covering marketing, AI and business growth.
Your buyers are asking AI who to use. Does it say you?

See for free whether ChatGPT, Claude, Perplexity, Gemini and Google name you, and get the plan to become the answer.

Check my AI visibility →
Sundays only

Get the Sunday newsletter.

One email a week. AI experiments, marketing tactics, and the workflows Lilach is building right now in her own business.

Subscribe free

Let’s get your marketing running on AI.

Book a free 30-minute call

We figure out what you need, where AI fits in, and what working together would look like.

Book the call →

Or take the 30-second calculator

You’ll see the hours and the money quietly leaking out of your week, and the three workflows worth building first.

Take the calculator →

Or grab the free AI resource library

Prompt packs, templates, checklists, and swipe files. The exact tools I build for paying clients. Yours, free.

Get the library →
Keep reading

More from the blog.