RMS Cloud Holiday Park Booking Phishing

Scam Description

I'm in Australia. I book stays at holiday parks. On 26 October, guests with upcoming bookings started getting WhatsApp messages, texts and emails about those stays. On 27 October, RMS Cloud confirmed it. RMS Cloud is the booking system used by a lot of Australian holiday parks, including parks in the BIG4, Reflections Holidays, G'day Parks and Summerstar Tourist Parks networks. The messages quote real booking details. That can be a name, the stay dates, or a confirmation number. They ask you to confirm card details or to make a payment. They say the booking will be cancelled unless you act quickly. The link opens a website that is not run by RMS Cloud and not run by the park. RMS Cloud says the messages are not from them. Guest names, contact details and booking details were accessed. Credit card and payment details were not. BIG4 said a breach of that third-party platform led to fraudulent messages asking for a credit card or payment details. Reflections Holidays told future guests that phishing emails were claiming a booking payment had failed, and said not to click links or share payment details. Summerstar Tourist Parks said fraudulent emails and WhatsApp messages that look like they come from Summerstar ask you to click a link to verify the booking. A message that already knows the stay is still a scam if it asks for a card or a payment through a link. The real booking does not change because a text arrived. If one of these messages lands with you, do not click the link and do not reply. Do not type in a card number. Open the park's own website and call the number published there, or use the confirmation you already have. If you already entered card details, call your bank on the number printed on your card. Report it to Scamwatch. Anyone who later offers to recover a payment for a fee is another scam.