>After exchanging messages with who she thought was the hotel in Cairo via the Booking.com app, she was sent a payment request. It had in fact come from scammer

>After exchanging messages with who she thought was the hotel in Cairo via the Booking.com app, she was sent a payment request. It had in fact come from scammers. "I clicked on it not suspecting it was a scam, given it was in the same ongoing chat in the app," she told the BBC. Are you sure? This makes it sound like whatever account hackers gained control of was able to send messages directly to the app. If they log into a booking.com portal to do that, and booking.com hasn't set up multifactor authentication, they aren't blameless.