Fake PGA National Resort '$1,245 charge' texts point to pgaresort.reservation247.com, MalwareTips warns

What happened

MalwareTips published a warning on 20 October 2026 about a text message invoking PGA National Resort that refers to a $1,245 charge and directs the recipient to Reservation247 to review, modify or cancel a reservation. It says the message reportedly includes booking details such as the guest's name, a reservation reference and arrival information, which makes it more convincing. The link uses a 'pgaresort' subdomain under reservation247.com, so the controlling domain is reservation247.com, not the resort's official site, pgaresort.com. MalwareTips describes it as a resort-impersonation text and says it does not accuse PGA National Resort of running the scheme; it could not retrieve the live Reservation247 page, so the form fields and operator remain unverified. It advises not opening the link to check whether a charge exists, checking bank activity and the original booking through trusted channels, confirming any payment request directly with the resort, and not sharing booking codes publicly.

How the scam works

MalwareTips says the text works because of context: a resort name and apparent booking details make an unexpected message look connected to a real trip, and travel companies do send genuine confirmations and payment notices. Knowing a name or reservation detail does not give a sender authority to collect money, and the available evidence does not show how the details were obtained.

The $1,245 figure is meant to cause alarm so the recipient looks for the quickest way to stop a loss, and a "cancel" option makes clicking feel protective. On a small phone screen the "pgaresort" prefix can hide the part of the address that matters, reservation247.com. MalwareTips notes that some hotels do use outside reservation providers, so the safe step is to verify the relationship using the original confirmation or the resort's official site rather than trusting an unsolicited link. A fake booking page could ask for card details, an account password, contact details or a one-time code; MalwareTips stresses these are possible methods, not fields it saw, because the page was unavailable. If someone replies, follow-up messages or calls may continue the same story, so be wary of requests to move to a messaging app or pay immediately. MalwareTips' lead image is an illustration with a non-working example address, not a captured message.

Source

MalwareTips, "Reservation247 PGA Resort Text Scam EXPOSED - Is That $1,245 Charge Real?" (published 20 October 2026).