Booking.com's AI assistant Dot told a customer to pay £1,500 by bank transfer for a non-existent villa
A customer booked a villa in Positano, Italy on Booking.com and received a message claiming to be from the host demanding full payment by bank transfer. He asked Booking.com's AI Trip Support chat tool, Dot, whether this was genuine. It replied that the property required full payment via bank transfer, so he transferred £1,500. The villa did not exist. Booking.com apologised and said the booking confirmation stated payment would be taken by card. It removed the listing and is processing a full refund.
What the AI did
When the customer asked Booking.com's AI Trip Support chat tool, Dot, whether a payment demand from the supposed host was genuine, Dot replied that the property required full payment by bank transfer before arrival. That answer was wrong: the booking confirmation said payment would be taken by card.
First reported October 21, 2026 · Added to the register November 1, 2026 · 1 source
- Amount transferred to scammers
- £1,500
- Developer
- Booking.com
- Deployer
- Booking.com
- Model
- Dot (AI Trip Support chat tool)
- Affected
- Alfie Learmouth
- Country
- Italy
- When it happened
- Not stated in the sources
- First reported
- October 21, 2026
What this means for you
Could this affect you?
If you run or rely on an AI customer support chatbot. Customers of travel and booking platforms who use AI support chatbots to check payment requests are exposed, as are platforms whose chatbots can wrongly confirm off-platform payment demands and then face customer losses and refund claims.
What to check
- Stop customer-facing AI assistants from confirming payment methods unless the answer comes from the booking's actual payment policy.
- Block AI assistants from validating third-party payment requests.
- Route any off-platform or bank-transfer request raised with the assistant to fraud handling.
- Monitor and test chatbot answers on fraud-related questions.
Areas of your AI programme this touches
Every fact and its source (3)
- Chatbot's incorrect adviceSaid full payment via bank transfer was required“yes, the property requires full payment via bank transfer before your arrival”[1]
- Booking.com's actual payment termsPayment by card, not bank transfer“the confirmation explained that payment would be taken by card rather than by bank transfer”[1]
- Company responseFull refund processing; listing removed“We can confirm that we are processing a full refund, and the property is no longer listed on our platform.”[1]
Sources
- Booking.com AI bot told groom to give £1,500 for scam villa | Clacton and Frinton Gazetteclactonandfrintongazette.co.uk · October 21, 2026
How this record is classified. Severity M (3/5): harm to individuals, or a policy breach with limited reach. OECD level: incident, an event in which an AI system led to actual harm. Evidence: Reported, meaning press reporting only.
The facts in At a glance and in Every fact and its source are quoted from the sources listed. The summary, What the AI did and What this means for you are written from those sources and checked against them automatically before publication. Records reflect what has been disclosed, not everything that has happened. Incidents are found through news feeds and the GDELT Project.
