An online booking offer can display real photos, a consistent price, and the name of an existing establishment while still being fraudulent. The reliability of an offer relies on verifiable technical and legal signals before any payment is made, whether the booking concerns holiday accommodation, a seasonal rental, or a purchase of a tourist service.
Registration number and legal framework for tourist rentals
Since the Le Meur law of November 2024 and the European regulation (EU) 2024/1028, tourist rentals in France must be registered in a unique national online service. Each listing must display a registration number. Its absence is an immediate warning signal.
The fine for not having a number can reach 10,000 euros, and rises to 20,000 euros in case of false declaration. This framework provides a concrete verification criterion: before booking accommodation, search for this number in the listing. If it is not present, request it from the owner in writing.
For primary residences in Paris, tourist rentals are limited to 90 days per year since January 2025. A Parisian listing available year-round without mention of a secondary residence or change of use deserves thorough verification. You can check the reliability on Xikori with Netscope to cross-reference the information in a listing with publicly available data.
Another tangible clue appears with the energy performance diagnosis (DPE), which has become mandatory for tourist rentals in tight zones. Properties rated F will be banned from rental starting in 2028. A listing that does not mention any energy class in a large urban area may indicate an owner circumventing regulations.
Reservation hijacking on legitimate platforms
The most formidable scams no longer go through fake websites. They exploit real bookings on platforms like Booking or Airbnb. The scenario is precise: after a legitimate booking, the traveler receives a message or a call mimicking the customer service of the platform.
The message requests a “confirmation” with credit card details or an additional payment within 24 hours. The data used is real (name, stay dates, hotel name, amount paid), which makes the attempt credible. This type of hijacking after hacking can lead to total loss of the booking and unauthorized charges.
Two reflexes can help neutralize this risk:
- Never click on a link received via message or email after a booking. Open the official app of the platform and check directly in the customer area if any action is requested
- Never provide bank details over the phone, even if the caller mentions your booking number. Booking platforms never request additional payment by phone
- Check the sender’s email address: a domain that differs slightly from the official domain (an extra letter, a hyphen added) indicates a phishing attempt
Legal mentions and technical consistency of the booking site
Before any payment on a site you do not know, the legal mentions are the first point of control. They must indicate the company name, postal address, registration number, and contact information. The absence of this information is enough to disqualify a site.
Copy the indicated postal address and search for it in a mapping service. If it leads to a vacant lot, a residential area unrelated to the displayed activity, or a building clearly unsuitable, caution is warranted.
General terms and conditions of sale and cancellation policy
The GTC must be accessible before payment validation. Read the cancellation policy first: a contract that does not provide for any refund indicates a high risk. Reliable platforms display clear conditions with specific deadlines (free cancellation until a certain date, penalties thereafter).
Also check the consistency between the domain name and the proposed activity. A site whose URL has no relation to the type of accommodation or service sold reproduces a common pattern in online scams.
Payment methods offered
A site that only accepts bank transfers or prepaid cards does not allow for recourse in case of a dispute. Prefer credit card payment, which offers dispute mechanisms with your bank (chargeback procedure).
The padlock in the address bar (HTTPS protocol) confirms that the connection is encrypted, but it does not guarantee the legitimacy of the seller. Fraudulent sites also use SSL certificates.
Online customer reviews: what they show and what they hide
Customer reviews remain a useful indicator, provided you do not rely on them blindly. A profile of exclusively positive reviews, published over a short period, with similar wording, indicates manufactured reviews.
Cross-check reviews on multiple platforms. A property listed on only one site, with no trace elsewhere, deserves further examination. Type the name of the establishment followed by the word “scam” in a search engine: negative feedback from other travelers often appears in the first results.
- Check that the reviews mention specific details (location, equipment, interaction with the owner) and not just generic phrases
- Look at the date of the reviews: accommodation with only recent reviews and no history may be an account created for a one-time scam
- Compare the photos published by customers with those in the listing. A marked discrepancy between the two reveals a misleading listing
Verifying an online booking offer relies on the accumulation of consistent signals, not on a single criterion. The registration number, legal mentions, payment method, and consistency of reviews form a bundle. A single missing signal does not prove fraud, but two combined absences justify moving on to another offer.