Staying safe with your accommodation booking
How to recognise suspicious messages, check unexpected payment requests and get help from our team
Last updated 30 October 2026
At Alloggio, looking after our guests includes helping you recognise suspicious messages and know where to turn for support.
RMS Cloud, a technology provider used across the accommodation industry, has published an update about unauthorised access to some guest contact and booking information. Its investigation is continuing.
Scam messages targeting accommodation guests can include genuine reservation details and arrive by WhatsApp, text or email. Unexpected phone calls about bookings have also been reported.
The potential impact on Alloggio guests is still being established. We will contact guests directly if we identify that their information may be involved.
What to look out for
Take care with unexpected messages or calls that:
ask you to make an urgent payment to avoid your booking being cancelled;
say your card has been declined and ask you to enter payment details through a link;
ask you to pay into a different bank account or use a new payment method; or
request passwords, one-time security codes or personal information.
Knowing your name, stay dates or booking number does not prove a message is genuine. A familiar logo or sender name is not enough to verify it either.
How to check a message
Pause. Do not reply, open links or attachments, share information or send money until you have checked the request.
Find a trusted contact. Go to your accommodation provider’s official website yourself and use the contact details listed there. Do not use a link or number supplied in the suspicious message.
Speak with the team. Ask them to confirm the request before taking any action. For an unexpected phone call, hang up and call the property using its published number.
If you have already responded
These messages can be convincing. If you have responded, acting promptly can help reduce the risk.
Paid or shared card or banking details: Contact your bank or card provider immediately using its official number or secure app. Explain what happened and follow its advice on protecting your accounts.
Shared a password or security code: Secure the relevant account through its genuine website or app and contact that service’s support team. Change any password you disclosed, including anywhere else you used it. If you shared a banking security code, contact your bank immediately.
Clicked a link or downloaded something: Close the suspicious page and do not enter further information. Follow the Australian Government’s scam recovery guidance for advice on checking your device and accounts.
Keep a screenshot and the sender’s details for reporting, then block the sender. Please also let your accommodation team know. Do not send us card numbers, passwords or security codes.
Government advice and reporting
Scamwatch on spotting phishing scams: how to recognise suspicious requests and check who is contacting you.
Scamwatch on what to do if you’ve been scammed: practical steps if you have sent money or shared information.
Report a scam to Scamwatch: report suspicious contact to help authorities identify scams and warn others.
Report cybercrime through cyber.gov.au: make a report if money or personal information has been stolen or misused.
You can also type scamwatch.gov.au or cyber.gov.au into your browser to access these resources directly.
Additional support
IDCARE provides free support for people with identity and cyber concerns. Call 1800 595 160 in Australia or 0800 121 068 in New Zealand. This is a separate support service from the government resources above.
If something does not feel right, please contact your accommodation team using the details on its official website. We are here to help you check.