SECURITY! Fake charges -- this means Hosts are unknowingly taking bookings from criminals!

Sheila22
Level 10
New York, NY

SECURITY! Fake charges -- this means Hosts are unknowingly taking bookings from criminals!

HOSTS, BE ALERT!  Airbnb is totally insecure!  I am a Host and was shocked to find this out!

So, let me start first by saying: I first tried to go through Airbnb to find out more information about this, but have been VERY disappointed in the responses I 've gotten from them, so here I am in the Community to spread the word to other Hosts (who are likely in the dark about this problem) and hopefully we can get Airbnb to fix this problem immediately.  My daughter, a teen, just starting college, has a bank/card charge card -- carrying her not so large hard-earned savings -- does not have an Airbnb account.  I have warned her to not use this card except to withdraw cash, but she has used it (almost not at all) for very few online purchases -- this is how much exposure this account has had out there in the world (not that this information is all that relevant to what I'm about to tell you).

My daughter called me crying because $740  were charged to account for several  Airbnb reservations.

As a mom, I reached out to Airbnb to make sure that when my daughter files complaint with her bank (who have been very helpful so far) that I can be assured Airbnb will credit her for these charges.  Airbnb did promise me that -- so I feel confident that this piece of the issue will be resolved between bank/Airbnb through the bank's fraud department.

As a Host, I am NOT at all happy with the canned responses I received from Airbnb about this issue.  As a Host, if this didn't happen to my daughter, I would never have known this kind of thing can even happen with Airbnb -- yes with retailers -- but that is NOT the same thing at all!  My assumption was that Airbnb knows we Hosts are in the vulnerable position of welcoming strangers into our homes, so Airbnb's security needs to be extra extra extra secure!!  We need to be able to trust that Airbnb has Host's security in mind and is going out of their way to be super secure.  I was trusting that was the case! Yet, when I reached out to Airbnb about this incident, they gave me canned responses with advice on how to file a complaint with the bank telling me how this kind of breach happens all the time to credit cards.  I was floored by this.  I asked them the same questions over and over and received no direct response to the questions I asked.  My questions were:

1) Was the name on the reservation the same name as my daughter's, or was this a different name? I need to know if my daughter's whole identity was stolen, meaning the criminal was able to make an account on the Airbnb website, as my daughter.  This is important to me, as her mother and as an Airbnb Host -- why can't Airbnb tell me the answer to this?  If a criminal was able to provide two gov't issued IDs giving proof of my daughter's identity (which Airbnb requires for an account, right?), this is something I really need to know.  I would need to get law enforcement involved.  Airbnb, please respond to this questions ASAP!

2) Was the name on the account a different name from my daughter's? If this is the case, as a Host, I'm really surprised Airbnb allows that to occur without batting an eye. We, the Hosts, need to know that this blatant lack of security is happening.  So please, Airbnb, just let me know -- is the name on the reservation different from the name on the financial account which was paying for these reservations?

3) What is Airbnb going to prevent this from happening in the future?

***I received several unhelpful, indirect, scripted responses from Airbnb, but no answers to these questions!!  I told them over and over.  I am a Host -- how do I know criminals aren't booking my place?!  My guess, is that the Hosts involved in the bookings related to my daughter's bank theft, still have NO IDEA that criminals booked their place!

***Here's are obvious solutions to this issue -- 1)  Airbnb, DO not allow your system to take bookings that have a different name on bank account/credit card than the name on the reservation  and/or 2) Airbnb, flag bookings where name on bank/credit card account doesn't match name on the reservation -- after flagging, seek more information.  3) Be transparent with Hosts -- if the reservation is flagged for this reason, let Hosts know, so they can decide whether the explanations for two names is valid, whether the new information provides enough proof of identity, and let the Host, in the end, choose to take or not take this reservation.

Currently, when Hosts see the transaction information, Airbnb is not being transparent with the Hosts.  We only see the name on the Guest's Airbnb account.  We do not see the name on the Guest's financial account.  It never crossed my mind that Airbnb would allow someone to book when these two names do not match.  Until now, I would see the name on the transaction and I always assumed that is also the name on the Financial account.  It is bad enough that we do not see the full name (first and last) of the Guest until AFTER we've taken the reservation, BUT when we do see the full name, this 'full name' we see can be totally disconnected from the financial transaction that is taking place to book your home.

Boooooo!  Airbnb!  You are failing Hosts terribly!!

38 Replies 38

@Sheila22   I said exactly the same thing further on in this thread earlier today. I tagged you, maybe you didn't see it.

You didn't get the responses you had hoped for from Airbnb, which is unfortunate, but you did tell them this booking was made with stolen credit card info, and even if you didn't tell them that the credit card co. will be refunding your daughter's $, that should be obvious to them. 

So just because they weren't willing to share any information with you (as we all know, they are anything but transparent), doesn't necessarily mean they haven't cancelled the fraudulently booked reservation and closed the bookers account. Let's hope so.

Branka-and-Silvia0
Level 10
Zagreb, Croatia

I said it numerous times and will say it again : Hosts, you should ask your guests to show you their photo ID during or before check in. Write down all their data (names, ID number, date of birth, nationality...) and make them sign it. If something happen you will know the identity of all your guest and will be able to call a police or Airbnb.

We are obligated to register all our guests, even children and infants, but we would do it even if it is not mandatory . I just can't immagine to give my keys to a total stranger without even knowing his name.

Here is a registration form with all informations we have to provide to the police (except contact phone and time of departure - it is just for us)

 

 

IMG_2030(1).JPG

 

 

 

 

 

 

So GREAT!  I WILL do it.  Your advice is great!  I was trusting Airbnb's system, but that is so stupid.  I will ask for the IDs and I will be asking about how they plan to make the transaction as well -- will you use a credit card or bank account in your own name?  Of course, I can't verify that, because Airbnb does not reveal that to me.  So, that is the crazy thing -- why don't they??  Why can't they just post to us, the Host's 'full name' and 4 last digits of the account associated with the transaction -- such normal thing.  The answer is -- THEY CAN, but THEY WON'T.

 

@Sheila22   I get a signed rental agreement and government ID with every rental. I use the AirBnB guest and host emails provided to send them back and forth as pdf's and jpegs. It's really simple and it protects me and my properties better than trusting AirBnB, HA/VRBO, Trip Advisor and Booking.com. 

But what about the transaction?  We are trusting Airbnb to do that for us -- and you have no idea if the "Guest" is using a stolen account.  Clearly, these criminals can get by Airbnb with the two gov't IDs, so they are able to prove an identity and make an Airbnb account and secure the booking -- BUT then they pay for the transaction using stolen money -- that is appears to be what is happening.  So, if they are fooling Airbnb's verification with two gov't IDs, they certainly can fool us too.  We NEED to see the name on the transaction!  We need to make sure it matches the Guest's name. Airbnb needs to share that with us.

Are you serious???

 

 

As a traveler I'd be LIVID if the listing agency I booked through shared my financial information, even the last 4-digits, with a third party. Not all hosts have guests best interests at heart - those same scammers could set up fraudulent host profiles as easily as they could guest profiles.

 

I agree Airbnb could do a better job of conducting background checks, but as a host you have options to vet guests based on their prior reviews and by asking questions. If you want to ask for a last name, form of payment, or a rental agreement with recommendations from their 1st grade teacher and last 5 employers that's within your rights, but you may also see bookings go down.

It's my home, so I'm going to take the advice from the more cautious hosts on this forum and require more information before booking -- not ideal to me.  I really wish I could trust Airbnb to be more secure, but the truth is they just aren't, and they aren't assuring Hosts that they are fixing the holes in this process -- they are ignoring my concerns when I reach out to them about this.  So, it is Airbnb that is putting Hosts in this unfortunate position of having to vet more thoroughly. Believe me, I really LOVED the smooth transactions and comfortable and friendly interactions with Guests (trusting Airbnb handle the vetting), but now I'm not feeling that way anymore.

Sheila22
Level 10
New York, NY

Airbnb can fix this situation right now -- if they really cared to --  by flagging when financial account name doesn't match the Guest name.  They can then ask for further documentation to prove the relationship of Guest to name on the financial account.  They can give this information to the Host and let the Host decide if they feel comfortable with this booking.  All of that seems very easy to me.  Airbnb should do it now.

@Sheila22  This is where there is a big issue that AirBnB can not fix. They are setting up an AirBnB account using in our cases your daughters information and in my case my husbands information and having all the transactions going to an email they also setup. It is no coincidence that neither your daughter or my husband did not have previous AirBnB accounts setup. 

Emilia42
Level 10
Orono, ME

@Sheila, are you sure that there was an actual reservation tied to this transaction? Cyber hackers are capable of many things, much of which is not understood by the general public. Just because your daughters card was charged doesn’t mean that someone using your daughters name and financial information tricked a host and check into an Airbnb apartment for the night. Legally, Airbnb or any other company cannot disclose credit card information whether used legally or not. I learned this when I started getting emailed credit card receipts for my deceased uncle (including purchased airline tickets in his name.)

I hate hearing stories like what happened to your daughter and it is truly unfortunate. As long as we live in a digital age, I don’t think any network is truly secure. A hacker will always find a way around sooner or later. I hope in the future we can all feel a little more secure and in control of our personal information.

@Emilia42   I have to give my credit card information to my accountant every year- his secretary told me that they are not legally allowed to keep clients' credit card info on file once they have used it to collect their fees. So there's all kinds of laws around giving out credit card and bank info that we're not fully aware of. 

I do not know anything -- Airbnb will not answer my questions.  I asked very specific questions that don't require revealing any personal information.  Is the name on the reservation my daughter's name? A yes or no answer will suffice, but  Airbnb won't tell me. Clearly, the name connected to the bank account would is in fact daughter'sr's name.  Then the next question is clear: Why is Airbnb allowing a different name on the financial transaction bank/credit card account from the one on the reservation (Airbnb Guest account name).  Seems a very simple thing to flag -- these two things don't match -- flag it.  Not so complicated.


@Sheila22 wrote:

I do not know anything -- Airbnb will not answer my questions.  I asked very specific questions that don't require revealing any personal information.  Is the name on the reservation my daughter's name? A yes or no answer will suffice, but  Airbnb won't tell me. Clearly, the name connected to the bank account would is in fact daughter'sr's name.  Then the next question is clear: Why is Airbnb allowing a different name on the financial transaction bank/credit card account from the one on the reservation (Airbnb Guest account name).  Seems a very simple thing to flag -- these two things don't match -- flag it.  Not so complicated.


you need to calm down, why cant anyone pay for anything? the booking name and credit card do not need to be the same.

I don't need to calm down.  It's my home.  Airbnb vetting should be more solid.  If a Guest is using a credit card/bank acocunt with a different name from the name on their Airbnb account, that should be flagged, and the Guest should be required to give further verification to explain this discrepancy.  That way if the financial information is stolen, then it can be thwarted by this flagging.  Why wouldn't the guest have a payment method that has their own name on it?  I don't understand that.