A warning about fake reservation messages
Some guests with upcoming stays are receiving WhatsApp messages, texts and emails that use real booking details and ask them to “verify” a reservation or pay again through a link. These messages did not come from Treebones.
What to do
- Do not click the link and do not enter card details.
- Your reservation is unchanged and needs no action from you.
- Treebones will never ask you to verify or re-pay a reservation through a link in a message.
- If you already entered card details, contact your bank or card issuer now.
We have reported this to our reservation software provider. We will update this page as we know more.
Updates
- September 29 Treebones reset all of its account passwords on September 19, the day these messages began. Our reservation software provider is still investigating, takes the matter seriously, and will reset its users’ passwords on October 1 as a further precaution. Our advice is unchanged: do not click the link, and do not share card details.
- September 21 Our reservation software provider has acknowledged the WhatsApp messages on its status page. The provider says it never requests personal or payment information through WhatsApp, and that it is investigating. Our advice is unchanged: do not click the link, and do not share card details.
- September 19 The messages guests have shown us contain names, stay dates and booking references.
- September 19 Fake “verify your reservation” messages reported by guests. This notice posted.
