Hotel WhatsApp asks for the SMS OTP "to confirm our booking" — scam or weird but real?

Seen by 1,410 travellers
Jump to the accepted answer
F
Felix WA OTP212 rep

Got a WhatsApp from a number similar to our hotel desk asking us to forward the verification code that just hit our phone so they can "confirm the reservation in the system." Booking.com already shows confirmed. Partner almost pasted the code. Is this ever legitimate in Sri Lanka, or do we block and call the hotel on the number from the official site?

28

4 Answers from travellers

Accepted Answer

Never send an OTP to anyone who messages you — hotel, bank, or cousin. Real desks do not need your SMS code to confirm a booking you already have on the platform. This is a classic account-takeover pattern. Do not reply with the code. Call or WhatsApp the hotel using the number on your booking voucher or official site, tell them about the fake chat, and change passwords if you typed anything. Block the stranger number. I will not list every scam variant; the rule is simple: OTP stays with you.

27
I
Imran Scam Watch1790 rep

Blocked immediately. Called the hotel landline from Google — they knew nothing about any code. Booking stayed confirmed.

13
M
Mateo Never OTP180 rep

Did not send the code. Warned the desk. Updating so my partner sees it in writing: OTPs never leave the phone.

7
F
Felix WA OTP212 rep

Same gut as fake certificates — urgency plus official-sounding words. Hang up on the story.

4
I
Isla Refused Gem176 rep

You must be logged in to post an answer.

Log In to Answer
Browse all questions