Protect your account and your guests from phishing: always check that you log in on the real Beds24 website, and keep every service that holds guest data secure with strong, separate passwords.
How phishing attacks work
Criminals gain access to guest data and use it to contact guests, asking for full payment in advance. The guest thinks the message is from the hotel and transfers the money to the criminal. All the criminal needs is the guest's email address or contact information.
Hotels receive phishing emails disguised as messages from a booking channel or channel manager. The emails contain a link to a fake extranet site where users enter their username and password, unaware of the risk. The phishers collect these credentials, access the extranets and collect customer data such as credit card details, telephone numbers and email addresses. They then contact guests to collect payments.
Protect your account
- Be careful with any email asking you to log in to an account, and make sure you are logging in to the real website.
- Make sure your email account and all other online services with guest details are secure.
- Use a different password for each online service that holds valuable data. Make them strong: not names or words.
- Keep your anti-virus software up to date.
- Use the security options in Settings > Account > Account Access: regular password changes, 2 Factor Authentication and Session Timeout. See Password.