Airbnb scam warning

Just got this message. Pretty sure it’s a scam. Sends a link that looks like an Airbnb login page. I’m pretty switched on and I almost put my login details in :rage:

3 Likes

@Flyboy The random capitalization is always a tip-off. Thanks for the heads up.

2 Likes

You can see another URL there - curta.xyz which is a Portuguese URL shortener, probably legit. But how could the enquirer put a link in an enquiry? It’s just too daft a message.

3 Likes

Definitely a scam because of the separate URL in the middle @Flyboy

Hope you didn’t click on the link.

Don’t know how much good it will do, but you can flag the profile to Airbnb.

1 Like

Yeah I reported it already

The fact it’s “http” as opposed to “https” is the main giveaway.

JF

3 Likes

I wonder if this is the same one @adrienne12 fell for?

1 Like

I don’t understand how the person was able to put an URL in an enquiry. Also there’s no reason why a genuine person would use an URL shortener for an URL that’s shorter than the shortened version. (Oh dear, that doesn’t make sense but I know what I mean.)

3 Likes

By the way, when you type the URL in, it does go to Airbnb.

The cruncher is the “?”.

All down to server behaviours, e.g. try this:

http://airbnb.com/external_link?url=http://www.bbc.co.uk

JF

When I type the URL in it clearly tells me in a message at the top that I’m “leaving Airbnb” and then I get this

4 Likes

Although I’m also intrigued as to the embedding of the link in a message that’s delivered via Airbnb, the obvious give away to me is why is someone asking if it’s my property? People can only message me if they have clicked on my property. Clearly not sending a booking request, just an inquiry. I’d click Pre-approve or decline and message them back.

4 Likes

I wouldnt click on it. sounds like you were catious good. Im really grateful for this forum for one reason alone, reading through some of the posts in the limited time I have… has made me decide to leave airbnb after 10 years. Its just not what it says on the tin anymore. Too much hassle for zero reward.

2 Likes

Always check for “https“

2 Likes

It appears to be taking advantage of a vulnerability in Airbnb’s own servers. Their URL filter doesn’t catch it because it’s a link to Airbnb’s own website, but then their servers automatically redirect to the embedded external URL. Obviously, security is not a strong suit of the Airbnb software team. Come to think of it, I the only strong suit they have is constantly breaking stuff.

3 Likes

Their programming team has lately been rounding off the taxes I have to collect, under their “we’ll collect the room tax and send it to you if you promise to send it to local authority” option. I’m sorry, that’s not the way our city calculates it.

1 Like

That’s scary. Must be heaps of hosts and guests getting scammed

What a shame for you @Donna_Jack

For me I still love doing Airbnb but appreciate it’s not for everyone.

1 Like