Fake Booking.com support numbers on a Facebook page and in Meta AI answers, Check Point says
In research published on 21 October 2026 about fake travel customer-support numbers, Check Point Exposure Management says searches related to Booking.com customer service on Facebook returned answers 'Summarized by Me…
- First reported
- Reports
- 1
Source: blog.checkpoint.com · published
What happened
In research published on 21 October 2026 about fake travel customer-support numbers, Check Point Exposure Management says searches related to Booking.com customer service on Facebook returned answers 'Summarized by Meta AI' that contained fraudulent contact numbers, and that the numbers were also promoted through a Facebook page. According to the full Check Point report, the Facebook page showed the UK mobile/WhatsApp numbers +44-7480-244094 and +44-7828-746424, while Meta AI summaries showed +44-7846-256304 and +44-7888-386743 (UK mobile/WhatsApp) and +1-888-620-3719 and +44-20-3320-2635. Check Point says these numbers belong to a campaign that impersonates more than 20 travel brands and appears built to influence search results and AI-generated answers, and that callers to such lines may be pressured to pay fraudulent fees or disclose booking and payment information. Booking.com does not operate these numbers. Check Point advises travellers to take support contacts only from the company's official website, app or booking confirmation and to treat requests for fees to release refunds, gift cards, cryptocurrency or remote-access software as warning signs.
How the scam works
Check Point maps the operation in five stages. In the manufacture stage, keyword-heavy 'how to contact [brand]' guides are generated in bulk from shared templates, with only the brand name and phone numbers changed. In the seed stage they are uploaded through public forms and upload paths, including Drupal webforms, WordPress form plugins, Optimizely and custom government portals, on sites that expose the files to search engines. Search engines and AI answer engines then index the content, which benefits from the host's authority. A traveller dealing with a cancellation, missed flight or delayed refund searches for help, finds the number and calls, and may then be pressured to pay fees or hand over booking and payment details.
Check Point says none of the confirmed files were detected by the 61 to 64 antivirus engines used in each scan, because the PDFs contain no malicious code: the danger is the phone number itself. Over seven weeks, production moved from Google Docs exports to scripted generation and a custom automation app, and the campaign was still active at the time of the research.
Source
Check Point, "How Fraudulent Airline Support Numbers Exploit Search Results and AI-Generated Answers" (published 21 October 2026).
Red flags
- A customer-support number found in a PDF, social media post or AI answer rather than on the company's own website or app.
- A 'how to contact [brand]' guide hosted on an unrelated university, government or commercial site.
- UK mobile or WhatsApp numbers presented as a major company's support line.
- An agent who asks for a fee to release a refund or rebook a flight.
- Requests for gift cards, cryptocurrency, wire transfers or remote-access software.
If you were targeted
- 1Get support numbers only from the company's official website, app or booking confirmation.
- 2Don't rely on phone numbers shown in AI-generated summaries or search snippets without checking them on the official site.
- 3Never pay a 'release fee' for a refund or install remote-access software at an agent's request.
- 4If you shared card details, call your card issuer on the number on your card and ask for the card to be blocked.
- 5If you shared booking details, contact the airline or travel company through its official channels to secure the booking.
- 6Report the number to the company being impersonated and to your national fraud reporting service.