Fake hotel booking-confirmation emails link to guestapruvestrue.com (Signal-Arnaques)
The French anti-scam site Signal-Arnaques reported on 28 October 2026 a wave of emails that look like hotel booking confirmations. In the example it describes, the email appears to come from the customer service of a …
- First reported
- Reports
- 1
Source: info.signal-arnaques.com · published
What happened
The French anti-scam site Signal-Arnaques reported on 28 October 2026 a wave of emails that look like hotel booking confirmations. In the example it describes, the email appears to come from the customer service of a named hotel and gives the recipient's name, stay dates and a booking reference. It asks the recipient to "validate" the reservation within 24 hours, otherwise the room will be released, and it promises that no payment will be taken at this stage. The hotel named in the sample is impersonated and is not accused of any wrongdoing.
How the scam works
The email links to a page on the domain guestapruvestrue.com. Signal-Arnaques found that the domain was registered only on 21 October 2026, a week before the report, and that the site's home page returns a 404 error. Only personalised links containing a booking number show a page. This suggests links are generated per target so that they look legitimate when opened by the intended victim and show nothing to scanners or researchers.
The usual aim of this type of message is to collect card details on a fake "validation" page, even though the email says nothing will be charged. Fraudsters can use the card data for purchases or sell it. The 24-hour deadline is meant to stop the recipient from checking the booking. A recipient who has not booked this hotel is an obvious target, but so is a traveller who has booked a stay somewhere else and assumes it is a reminder.
Booking-confirmation scams are especially effective because they arrive during busy travel periods, contain accurate-looking details and use urgency. Genuine hotels and booking platforms confirm via the platform you booked on and do not ask for card details via an unfamiliar link.
Source
Signal-Arnaques, report of fake hotel booking-confirmation emails, 28 October 2026.
Red flags
- A booking confirmation for a hotel you did not book, or from a hotel you booked through another platform.
- A demand to validate the reservation within 24 hours or lose the room.
- A link to an unfamiliar domain (guestapruvestrue.com) instead of the hotel's or platform's own address.
- The email stresses that no payment will be taken, then leads to a form.
- A recently registered domain whose home page does not work.
If you were targeted
- 1Do not click the link; check any reservation by opening the booking app or website you used yourself.
- 2Contact the hotel through the phone number on its official website if you are unsure.
- 3Never enter card details on a page reached from an unsolicited email.
- 4If you entered card data, call your bank, cancel the card and watch for charges.
- 5Report the email as phishing and to Signal-Arnaques or your national reporting platform.