Booking.com: the RiskMandate X-ray

a company · prepared · sources read on 2026-11-07 · the deck · how this X-ray was made · X-ray another name

What happened: how this X-ray was made →

With JavaScript, the graph of this X-ray and a player for each use case's simulation are drawn here. Everything they show is written out below.

What it does

Booking.com, part of Booking Holdings Inc. (NASDAQ: BKNG), is an online travel platform connecting travellers with accommodation, flights and car rentals. Since June 2023 it has added generative AI across the booking journey: the AI Trip Planner (built on its own recommendation models and partly on OpenAI's ChatGPT API), Smart Filter and Property Q&A, and from October 2025 its first in-house agentic tools, Smart Messenger and Auto-Reply for partners, alongside AI Trip Support, AI Voice Support and an AI Car Rental Helper for travellers. It also runs an app inside ChatGPT for browsing stays and rental cars, which hands the traveller back to Booking.com to book. s1 s3 s4 s5

Its AI agents

AI Trip Planner

A conversational planner in the Booking.com app that answers general and property-specific travel questions, suggests destinations and stays, builds itineraries and links straight into the accommodation booking flow. Booking.com says it is evolving into an embedded AI companion across the booking journey. s1 s3 s4 s13 s14 s15

What it can do:

Recommends destinations and accommodation using Booking.com's existing machine learning models, partly powered by OpenAI's ChatGPT API
Shows a visual list of destinations and properties with Booking.com pricing and deep links
Is integrated into the in-app accommodation booking experience: a tap on a property lets the traveller complete the reservation
Property Q&A: retrieves information from the property listing, traveller reviews and photos to answer specific questions
With a signed-in account, can draw on past searches and travel history (per CNET)
Runs on Booking.com's data platform (BDX), per a vendor case study

Smart Messenger

A partner-facing agent in the Extranet that helps accommodation partners communicate with guests; paired with Auto-Reply, which answers guest questions instantly from reply topics the partner defines. Booking.com calls these its first customer-facing agentic AI. s4 s6 s7

What it can do:

Gathers partner, property and reservation information to autonomously take action, knowing when and what to suggest
Generates responses in the partner-to-guest messaging channel
Auto-Reply: instant responses to common and unique guest questions on partner-defined topics
Learns from past interactions and user feedback
Help Me Reply (partner hub): drafts responses to guest messages on the extranet

AI Trip Support

A 24/7 first point of contact for travellers on customer service topics, helping them find property information and make reservation changes on their own, with handover to a human representative for complex questions. s4 s9

What it can do:

Gathers relevant information from the property to answer questions such as parking
Supports travellers making reservation changes independently
Hands complex questions over to an informed customer service representative
Live in ten markets including the US, UK, France and Germany

AI Voice Support

Voice-powered trip management on Booking.com phone lines: callers ask in their own words (for example to cancel a reservation) and the tool pulls their booking details to help, connecting to a human agent when needed. s4 s9

What it can do:

Pulls the caller's booking details
Handles trip-management requests such as cancellation
Connects to a human agent and passes on all necessary information
Runs on English- and German-speaking phone lines, with Italian and Spanish in testing

AI Car Rental Helper

Answers common questions about a car rental booking (payment methods, pick-up checklists, insurance) 24/7; Booking.com reports early testing led to fewer support calls, reservation changes and disrupted pickups. s4 s5

What it can do:

Reads the customer's rental booking and its terms to answer questions
Explains payment methods, pick-up checklists and insurance information
Available in English, French, Spanish, German, Dutch and Italian

Use cases: reach, mandate and gap

For each use case: what the agent can technically reach (from the sources), what a deployer would plausibly authorise (the mandate: illustrative, our judgement), the gap between the two (authority nobody accepted), and the controls that publicly stand in the way.

Smart Messenger answers a property's guests

The agent: Smart Messenger · who uses it: An accommodation partner in the US, UK, New Zealand or Australia using the Extranet inbox, with Smart Messenger and Auto-Reply switched on (an illustrative case built on the documented features).

Reach	Kind	Sources
Partner, property and reservation information, which Smart Messenger gathers to decide what to suggest or do	data	s4
Guests: suggested replies and instant Auto-Reply answers go to travellers in the partner-to-guest messaging channel	people	s4 s6
The partner's Extranet inbox, where Smart Messenger, Auto-Reply and Help Me Reply are live	system	s4 s6
Past interactions and user feedback, from which the agent keeps learning and adapting its responses	data	s4
Payment requests in the same channel: compromised partner accounts have used Booking.com's official guest messaging to ask guests for card details, with real booking information	money	s18 s17 s19

Mandate (illustrative)
Illustrative: suggest replies about the property and the stay; the partner approves each one before it is sent
Illustrative: answer instantly only on the topics the partner has defined in Auto-Reply
Illustrative: never ask a guest for payment or card details in a message

Gap: reach beyond the mandate	From the reach
Booking.com says Smart Messenger gathers information to autonomously take action; public material does not say which actions it takes without the partner's approval.	Partner, property and reservation information, which Smart Messenger gathers to decide what to suggest or do; Guests: suggested replies and instant Auto-Reply answers go to travellers in the partner-to-guest messaging channel
The agent writes in the channel that phishing has used to request card details from guests; no public description says how agent messages about payment are limited or marked.	Payment requests in the same channel: compromised partner accounts have used Booking.com's official guest messaging to ask guests for card details, with real booking information; Guests: suggested replies and instant Auto-Reply answers go to travellers in the partner-to-guest messaging channel
Learning from past interactions: what is kept, and whether it is scoped to one property, is not publicly documented.	Past interactions and user feedback, from which the agent keeps learning and adapting its responses

Controls that publicly stand in the way	Sources
Auto-Reply answers from custom reply topics the partner defines	s4
Account security: monitoring and blocking of suspicious activity around the clock, and locking or blocking of inactive partner extranet accounts (Booking.com statement, December 2023)	s17

The simulation, each action placed against the mandate (RiskMandate is never in the request path: read-only by design: it places, it does not stop):

A guest messages the property asking whether early check-in is possible (illustrative) (person, reaches Guests: suggested replies and instant Auto-Reply answers go to travellers in the partner-to-guest messaging channel): inside the mandate
Smart Messenger gathers the reservation and property details and suggests a reply (agent, reaches Partner, property and reservation information, which Smart Messenger gathers to decide what to suggest or do): inside the mandate
The partner approves the suggestion in the Extranet inbox and it is sent (person, reaches The partner's Extranet inbox, where Smart Messenger, Auto-Reply and Help Me Reply are live): inside the mandate
Auto-Reply instantly answers a parking question from a partner-defined topic (agent, reaches Guests: suggested replies and instant Auto-Reply answers go to travellers in the partner-to-guest messaging channel): inside the mandate
A guest asks how to pay the balance; the agent acts on its own and replies with payment instructions taken from an earlier conversation (illustrative) (agent, reaches Payment requests in the same channel: compromised partner accounts have used Booking.com's official guest messaging to ask guests for card details, with real booking information): outside the mandate: in the gap. What RiskMandate's record shows: RiskMandate's record shows an agent message about payment sent in the guest channel without the partner's approval, outside m1 and m3, and lists it as a gap next to the channel's documented phishing history.
Reuses wording learned from a past conversation that included another guest's booking details (illustrative) (agent, reaches Past interactions and user feedback, from which the agent keeps learning and adapting its responses): outside the mandate: in the gap. What RiskMandate's record shows: RiskMandate's record shows the agent drawing on stored past interactions beyond the current reservation, and records that the scope of that learning is not publicly documented.
The partner reviews the conversation history in the inbox the next morning (person, reaches The partner's Extranet inbox, where Smart Messenger, Auto-Reply and Help Me Reply are live): inside the mandate

A traveller cancels a stay by phone with AI Voice Support

The agent: AI Voice Support · who uses it: A traveller with an existing reservation calling an English- or German-speaking Booking.com support line (an illustrative case built on the documented feature).

Reach	Kind	Sources
The caller's booking details, which the tool pulls once connected	data	s4
Trip management, including cancellation requests; Booking Holdings' CEO says Booking.com customers can now cancel bookings through agentic AI	system	s4 s9
Property information used to answer questions and support reservation changes (AI Trip Support)	data	s4
Human customer service agents, who receive the case with all necessary information on handover	people	s4 s11

Mandate (illustrative)
Illustrative: act only on the caller's own reservation, after the caller is matched to it
Illustrative: cancel only after reading back the cancellation terms and getting a clear yes
Illustrative: hand to a human for anything outside the property's policy

Gap: reach beyond the mandate	From the reach
Public material does not say how a caller is matched to a booking before the tool pulls booking details.	The caller's booking details, which the tool pulls once connected
Whether the tool completes a cancellation itself or hands it to a person, and what confirmation it asks for, is not publicly documented.	Trip management, including cancellation requests; Booking Holdings' CEO says Booking.com customers can now cancel bookings through agentic AI

Controls that publicly stand in the way	Sources
Handover to a human agent, who is given all necessary information	s4
A small intent and topic detection model decides whether an issue is self-service or needs a human; unresolved issues go to a human agent	s11
Memory features are offered only with customer consent	s11

The simulation, each action placed against the mandate (RiskMandate is never in the request path: read-only by design: it places, it does not stop):

The traveller calls and says: I need to cancel my reservation (person, reaches The caller's booking details, which the tool pulls once connected): inside the mandate
AI Voice Support pulls the booking details for the caller (agent, reaches The caller's booking details, which the tool pulls once connected): inside the mandate
Checks the property's cancellation conditions (agent, reaches Property information used to answer questions and support reservation changes (AI Trip Support)): inside the mandate
Cancels the reservation without reading back the non-refundable charge (illustrative) (agent, reaches Trip management, including cancellation requests; Booking Holdings' CEO says Booking.com customers can now cancel bookings through agentic AI): outside the mandate: in the gap. What RiskMandate's record shows: RiskMandate's record shows a cancellation completed without the confirmation step in m5, with the booking and the charge it carried.
The caller mentions a second stay booked by a relative; the tool pulls that booking too (illustrative) (agent, reaches The caller's booking details, which the tool pulls once connected): outside the mandate: in the gap. What RiskMandate's record shows: RiskMandate's record shows the tool reading a reservation that is not the caller's, outside m4, and lists caller matching as an undocumented gap.
Hands the call to a human agent with the case context (agent, reaches Human customer service agents, who receive the case with all necessary information on handover): inside the mandate

Planning a trip and booking from the AI Trip Planner

The agent: AI Trip Planner · who uses it: A signed-in traveller in the Booking.com app planning a family holiday (an illustrative case built on the documented flow).

Reach	Kind	Sources
Booking.com's recommendation models and accommodation inventory	data	s1
Booking.com pricing shown with deep links to property details	data	s1
The traveller's past searches and travel history when signed in	data	s14
The in-app accommodation booking flow: one tap on a property to complete the reservation	system	s1
OpenAI's ChatGPT API, which partly powers the conversation	outside	s1

Mandate (illustrative)
Illustrative: recommend and show options; a booking happens only when the traveller taps through and confirms
Illustrative: use account history only to personalise this traveller's results

Gap: reach beyond the mandate	From the reach
Which parts of the conversation and account history reach the third-party model is not publicly documented.	The traveller's past searches and travel history when signed in; OpenAI's ChatGPT API, which partly powers the conversation
Booking.com's chief business officer named wrong prices and irrelevant content as the failure mode; prices shown in chat are a path to a booking.	Booking.com pricing shown with deep links to property details; The in-app accommodation booking flow: one tap on a property to complete the reservation

Controls that publicly stand in the way	Sources
The reservation is completed by the traveller in the app's booking flow, not in the chat	s1
Launched as a beta for signed-in US Genius members with English settings	s1 s2

The simulation, each action placed against the mandate (RiskMandate is never in the request path: read-only by design: it places, it does not stop):

Asks for a family-friendly beach stay with a pool for four (person, reaches Booking.com's recommendation models and accommodation inventory): inside the mandate
Personalises suggestions using the account's past searches and travel history (agent, reaches The traveller's past searches and travel history when signed in): inside the mandate
Sends the conversation, including details from past trips, to the model provider (illustrative) (agent, reaches OpenAI's ChatGPT API, which partly powers the conversation): outside the mandate: in the gap. What RiskMandate's record shows: RiskMandate's record shows account history leaving Booking.com for a third-party model, beyond m8, and marks what is sent as undocumented.
Shows a visual list of properties with prices and deep links (agent, reaches Booking.com pricing shown with deep links to property details): inside the mandate
Quotes a price in chat that differs from the live rate on the property page (illustrative) (agent, reaches Booking.com pricing shown with deep links to property details): outside the mandate: in the gap. What RiskMandate's record shows: RiskMandate's record shows the quoted price against the rate the booking flow used, the failure mode Booking.com itself named.
Taps a property and completes the reservation in the app (person, reaches The in-app accommodation booking flow: one tap on a property to complete the reservation): inside the mandate

Incidents, as reported

2023-09: Phishing through Booking.com's guest messaging: attackers took over hotels' Booking.com accounts, extracted guest booking data and messaged guests demanding card details to avoid cancellation. Booking.com said its backend was not breached and described new measures to lock or block inactive partner extranet accounts. The same channel is where Smart Messenger and Auto-Reply now operate; the incidents did not involve the AI agents. s18 s17
2026-03: Reports continue of compromised hotel extranet accounts used to send fraudulent payment requests through the official guest messaging system (not involving its AI agents: the same messaging channel the Smart Messenger agent now uses) s19

The run

The search agents that looked for leads on 2026-11-07T21:16:45.017Z, for a total cost of $0.1243. What a model says is a lead, not a fact.

Agent	Model	Time	Citations	Leads
Perplexity search	`perplexity/sonar`	6.9 s	15	10
OpenAI search	`openai/gpt-5.4-nano:online`	12.4 s	4	7
Gemini search	`google/gemini-3.1-flash-lite:online`	6.1 s	6	10
OpenRouter web search	`anthropic/claude-haiku-5.5`	24.8 s	9	21

Leads: what the models claimed, and what we found

Model	Claim	Status	Source
perplexity	Booking.com launched the AI Trip Planner in June 2023.	confirmed	s1
perplexity	Travellers can ask the AI Trip Planner both general and specific travel questions.	confirmed	s1
perplexity	The AI Trip Planner can create itineraries for a city, country or region.	confirmed	s3
perplexity	The AI Trip Planner incorporates real-time availability and pricing data from Booking.com's database.	unverified
perplexity	AgentHub is Booking.com's internal platform for building modular, production-grade AI agents and workflows.	unverified
perplexity	One of the first agents built on AgentHub was the AI Trip Planner Q&A.	unverified
perplexity	The Trip Planner Q&A agent matches property mentions to Booking.com property IDs, fetches information from internal systems and calculates distances and travel times.	unverified
perplexity	Booking.com says its AI features are evolving from a standalone AI Trip Planner into an embedded AI-powered companion across the booking journey.	confirmed	s4
perplexity	The AI Trip Planner can help travellers in-trip, for example with attractions.	confirmed	s3
perplexity	Investors fear AI agents could bypass online travel intermediaries, while Booking's inventory, payments and supplier relationships could make it an essential partner for them.	confirmed	s10
openai	The AI Trip Planner is built on Booking.com's existing ML recommendation models and partly powered by OpenAI's ChatGPT API.	confirmed	s1
openai	The AI Trip Planner handles general and specific queries, including scoping destinations and accommodation and creating itineraries for a city, country or region.	confirmed	s1
openai	The AI Trip Planner is integrated into the in-app accommodation booking experience, so users can complete reservations from its recommendations.	confirmed	s1
openai	It shows a visual list of destinations and properties with Booking.com pricing and deep links.	confirmed	s1
openai	OpenAI reports Booking.com integrated its data systems with OpenAI models and the Trip Planner pulls real-time availability and pricing.	unverified
openai	AI Trip Support is a 24/7 first point of contact that gathers property information (for example parking), supports reservation changes and hands complex questions to a human representative.	confirmed	s4
openai	Booking.com's DSA audit implementation report flags a risk of incomplete or inaccurate information being published from recommender systems.	not-found	s8
gemini	Booking.com's Property Q&A answers property-specific questions from listing details, guest reviews and photos.	confirmed	s3
gemini	The AI Trip Planner Q&A agent matches property mentions to internal property IDs, fetches internal information and calculates distances to landmarks and transport hubs.	unverified
gemini	Smart Messenger gathers partner, property and reservation data to autonomously suggest responses and actions, and learns from past interactions.	confirmed	s4
gemini	AI Rental Helper answers car rental questions on terms, payment methods, pick-up checklists and insurance.	confirmed	s4
gemini	AI Voice Support accesses booking details, assists with requests such as cancellations and connects to human agents with context.	confirmed	s4
gemini	Booking.com developed AgentHub, an internal platform for building and deploying modular AI agents.	unverified
gemini	The AI Trip Planner combines Booking.com's machine learning infrastructure with the OpenAI ChatGPT API.	confirmed	s1
gemini	Trip discovery reaches live bookable inventory, pricing and availability, reviews and destination data.	unverified
gemini	General AI travel planning risks include hallucinations, outdated pricing and privacy concerns.	unverified
gemini	Consumers are highly concerned about privacy and about AI acting on financial transactions without explicit confirmation.	unverified
openrouter	The AI Trip Planner was announced in June 2023 as a beta for selected US Genius members in the app, built partly on OpenAI's ChatGPT API.	confirmed	s1
openrouter	It produces visual lists with Booking.com pricing and deep links and lets users complete an accommodation reservation in the app.	confirmed	s1
openrouter	The AI Trip Planner pulls real-time availability and pricing data, per OpenAI's case study.	unverified
openrouter	AgentHub is an internal platform where teams build and deploy LLM-driven travel agents in hours from configuration and reusable components.	unverified
openrouter	AgentHub includes guardrails such as prompt-injection detection, PII filtering and jailbreak prevention.	unverified
openrouter	Booking.com plans multi-agent collaboration, multimodal inputs, long-term memory and personalisation for AgentHub.	unverified
openrouter	The Trip Planner Q&A agent, built on AgentHub, matches property IDs, fetches internal data and calculates distances and travel times.	unverified
openrouter	Smart Messenger gathers partner, property and reservation information, generates responses to guest messages in the Extranet, works with partner-defined Auto-Reply topics and learns from feedback.	confirmed	s4
openrouter	Smart Messenger is live for partners in the US, UK, New Zealand and Australia; Auto-Reply is global.	confirmed	s4
openrouter	Smart Messenger's early experiments produced a 73% increase in partner satisfaction over previous messaging tools.	confirmed	s4
openrouter	AI Voice Support reads booking details for requests such as cancellation, escalates to a human with context, and runs on English and German lines with Italian and Spanish in testing.	confirmed	s4
openrouter	AI Rental Helper answers questions about a car rental booking and its terms.	confirmed	s4
openrouter	By late 2024 the AI Trip Planner had expanded via the app to the UK, Australia, New Zealand and Singapore.	confirmed	s3
openrouter	The Trip Planner was launched within about 10 weeks of starting with OpenAI's API, after a hackathon.	unverified
openrouter	Property Q&A lowered support volumes and Smart Filters reduced search time.	unverified
openrouter	A hybrid strategy, including selective work with OpenAI, has roughly doubled accuracy across key retrieval, ranking and customer-interaction tasks.	confirmed	s11
openrouter	Booking's 2025 annual report warns AI agents may evolve into full-service booking platforms, disintermediating online travel companies.	confirmed	s7
openrouter	Booking's CFO said on the 4 August 2026 call that LLM traffic, paid and unpaid, is significantly below 1% of room nights.	confirmed	s16
openrouter	Booking.com's chief business officer said it built AI orchestration tools it now regrets, and that its failure mode would be irrelevant content or wrong prices.	confirmed	s12
openrouter	Booking.com research found 89% want to use AI to research travel but only 6% trust it to make decisions.	confirmed	s12
openrouter	Booking.com's chief business officer expects travel to be among the last categories to move to agentic commerce; LLMs are used for research, not yet booking.	confirmed	s12

The questions we would ask

We have not asked them yet.

Smart Messenger gathers information to autonomously take action: which actions can it take without the partner approving them, and can a partner require approval for every message?
Guest messaging has been used to phish guests for card details: can Smart Messenger or Auto-Reply ever send or suggest a payment request, and is such a message marked or held?
How is a caller matched to a reservation before AI Voice Support pulls booking details, and does it complete a cancellation itself or hand it to a person?
Which traveller data (conversation, account history, reservation details) is sent to third-party model providers, and is each agent action recorded against the booking it touched?
Press reports an internal agent platform with guardrails for prompt injection and personal data: will Booking.com publish what those guardrails cover for the agents that touch reservations?

Sources

s1 Booking.com Launches New AI Trip Planner to Enhance Travel Planning Experience (27 June 2023), Booking.com Newsroom (own-site, read 2026-11-07)
https://news.booking.com/en-us/bookingcom-launches-new-ai-trip-planner-to-enhance-travel-planning-experience/
s2 How Booking.com's AI Trip Planner Can Inspire Travelers to Plan that Last-Minute Summer Vacation (August 2023), Booking.com Newsroom (own-site, read 2026-11-07)
https://news.booking.com/how-bookingcoms-ai-trip-planner-can-inspire-travelers-to-plan-that-last-minute-summer-vacation/
s3 Booking.com Enhances Travel Planning with New AI-Powered Features for Easier, Smarter Decisions (30 October 2024), Booking.com Newsroom (own-site, read 2026-11-07)
https://news.booking.com/bookingcom-enhances-travel-planning-with-new-ai-powered-features--for-easier-smarter-decisions/
s4 Booking.com Debuts Agentic AI Innovations, Adding to its Robust Suite of GenAI Tools for Customers (9 October 2025), Booking.com Newsroom (own-site, read 2026-11-07)
https://news.booking.com/bookingcom-debuts-agentic-ai-innovations-adding-to-its-robust-suite-of-genai-tools-for-customers/
s5 Booking.com Is Making Car Rentals Easier with App in ChatGPT (20 May 2026), Booking.com Newsroom (own-site, read 2026-11-07)
https://news.booking.com/bookingcom-is-making-car-rentals-easier-with-app-in-chatgpt/
s6 How we're using generative AI to help make your property stand out (Click. Magazine, partner hub), Booking.com Partner Hub (own-site, read 2026-11-07)
https://partner.booking.com/en-gb/click-magazine/industry-perspectives/how-we-use-generative-ai
s7 Booking Holdings Inc. Form 10-K for the year ended 31 December 2025 (filed 18 February 2026; primary document bkng-20251231.htm), Booking Holdings Inc. (SEC EDGAR) (filing, read 2026-11-07)
https://www.sec.gov/Archives/edgar/data/1075531/0001075531-26-000009-index.htm
s8 Digital Services Act: 2025 Audit Implementation Report, Booking.com B.V. (filing, read 2026-11-07)
https://q-xx.bstatic.com/data/mobile/2025%20-%20Audit%20implementation%20report.pdf
s9 Booking Holdings credits AI for better booking, customer service (4 November 2026, originally CX Dive), CX Dive via Yahoo (press, read 2026-11-07)
https://travel.yahoo.com/news/articles/booking-holdings-credits-ai-better-212242496.html
s10 AI is starting to help Booking's business. Its stock should benefit (5 November 2026), CNBC (press, read 2026-11-07)
https://www.cnbc.com/2026/11/05/booking-holdings-q3-earnings-ai-opportunity.html
s11 Booking.com built agentic AI before 'agents' existed: small models for speed, big models for trust (8 December 2025), VentureBeat (press, read 2026-11-07)
https://venturebeat.com/ai/booking-coms-agent-strategy-disciplined-modular-and-already-delivering-2
s12 Booking.com says it built AI tools it wishes it had bought off the shelf (HumanX Amsterdam, 23 September 2026), The Next Web (press, read 2026-11-07)
https://thenextweb.com/news/booking-com-diageo-ai-at-scale-regrettable-work-humanx
s13 Booking.com's AI Trip Planner Got an Update. Here's How It Works (30 October 2024), Skift (press, read 2026-11-07)
https://skift.com/2024/10/30/booking-coms-ai-trip-planner-got-a-big-update-heres-how-it-works/
s14 How to Use the AI Trip Planner on Booking.com (2 March 2025), CNET (press, read 2026-11-07)
https://www.cnet.com/tech/services-and-software/how-to-use-the-ai-trip-planner-on-booking-com/
s15 Booking.com Orchestrates Data and AI at Scale with Astro, Astronomer (vendor case study) (other, read 2026-11-07)
https://www.astronomer.io/case-studies/booking/
s16 Will AI Agents Replace Booking.com? The 2026 Evidence, Conduit (vendor blog) (other, read 2026-11-07)
https://www.conduit.ai/blog/will-ai-agents-replace-booking-com
s17 Hackers target travelers using third-party booking agency (6 December 2023, with Booking.com's statement), FOX 5 New York (press, read 2026-11-07)
https://www.fox5ny.com/news/hackers-target-third-party-booking-agency
s18 Booking.com Customers Targeted in Major Phishing Campaign (28 September 2023), Infosecurity Magazine (press, read 2026-11-07)
https://www.infosecurity-magazine.com/news/bookingcom-customers-targeted/
s19 Booking.com scam targets hotel guest messages (5 March 2026), Hospitality.today (press, read 2026-11-07)
https://www.hospitality.today/article/booking-com-scam-targets-hotel-guest-messages

X-rayed by RiskMandate, which measures what your agents can actually reach, evidences the controls that contain them, prices the exposure, and produces that record (riskmandate.ai/llms.txt). The mandates are illustrative. Built by xray@web-summit.dinis from data/xray/booking-com/xray.json.