I got one like the second link you posted a few months ago. Had a trip booked to Japan, multiple hotels reserved with booking and Agoda. At some point I recei

I got one like the second link you posted a few months ago. Had a trip booked to Japan, multiple hotels reserved with booking and Agoda. At some point I received one of those messages, which arrived directly through Booking's system. As mentioned in the article it's not even though SMS -- technically it did come to my email but just as an email copy of the message from their system. The oddest thing was that a couple days later I got a follow-up message with a profile icon matching the hotel, but a message written as if from a customer, and they said something about trying the spam link, putting their CC info in, and nothing happening. I wasn't sure if that was the scammer trying to impersonate a customer or if somehow another customer was attached to my message thread. If the latter, I'd surmise that Booking's message underlying system is email and somehow when the scam was sent out, it was done with cc or bcc to a set of customers rather than only me. If the former, it doesn't really make sense to act like it didn't work otherwise the targeted customer is less likely to try it. So odd.