The Sun reports criminals are targeting the OTA in the hope of stealing cash and personal data from customers through popular mobile messaging app WhatsApp.
Users reported being sent WhatsApp messages claiming there had been a security breach, requiring them to change their password.
The link though gave hackers access to their bookings and other personal data, allowing them to send customers messages demanding holiday payments into bogus bank accounts.