Skip to main content

Helping older Aussies stay one step ahead of scammers. Not sure if it’s a scam? Ask us first.

Open 24/7 — answers within 30 minutes · Phone: 0468 609 702

SteadyCheckI've been scammed

Scam of the weekPhishing (steal logins)Pretends to be: RMS Cloud and accommodation providers using RMS (e.g. BIG4, Discovery Parks, G'day Parks)1 Nov 2026

Hotel and holiday park booking scam after RMS Cloud data breach

Scammers are using real booking details from a recent accommodation data breach to send fake messages about hotel and holiday park bookings. They ask you to click a link to update or confirm payment details to avoid cancellation.

What it looks like

You may get an email, SMS, or WhatsApp message that looks like it comes from a hotel, holiday park, or booking company such as RMS Cloud. The message may include your real booking number, check-in and check-out dates, and room type. It says your card was blocked or declined, and asks you to click a link to update your payment details.

Dear Guest, Your booking at Example Holiday Park is at risk. The card on file has been blocked by your bank. Please confirm your payment details within 24 hours to avoid cancellation. Click here to update: https://example.com/update-payment

A made-up example — not a real message, not a real link.

How to spot it

  • The message creates urgency, saying your booking will be cancelled if you don't act quickly.
  • It asks you to click a link or button to confirm or update credit card details.
  • It may include real booking information, making it look genuine, but scammers got those details from a data breach.
  • The sender may use WhatsApp, SMS, or an email address that does not match the accommodation provider's official domain.
  • The link address is not the official website of the hotel or booking company.

What to do

  1. Do not click any links or open attachments.
  2. Do not provide your credit card, bank details, or personal information.
  3. Contact the accommodation provider directly using a phone number from their official website or your original booking confirmation.
  4. Delete the suspicious message.
  5. If you have already clicked a link or entered details, contact your bank immediately.
Information:

Who to report it to

  • Scamwatch
  • ReportCyber
  • Your bank or financial institution
  • The accommodation provider you booked with

Warn your family and friends

WhatsApp Text message Email Facebook

Sources