Scam über whatsapp & booking.com ?

Hi ​@BigJim and ​@Johannes Rott !

Thanks for raising this, and sorry to hear your team was caught out. It happens more than people admit, and it's important that the community talks about it openly.

The fake login page issue is a real and recurring one. Bad actors spin up convincing copies of the Mews login and buy search ads or rely on staff searching "Mews login" and clicking the first result. One click is all it takes.

A few practices that significantly reduce the risk:

- Bookmark the real Mews login URL and make it a team rule to only ever use the bookmark – never search for it
- Enable single sign-on (SSO) with your identity provider if your IT setup supports it – this removes the password entirely as an attack surface
- Turn on two-factor authentication for all Mews users, we recommend Passkeys, or @FA by email link, even if credentials are captured, 2FA stops the attacker from getting in
- If anyone on the team suspects they've entered credentials on a fake page, reset the password immediately and check for any unusual activity in the audit log
- Train staff to look at the URL before entering anything – the real domain is app.mews.com

On the broader Booking.com situation: it's affecting properties everywhere right now. The combination of OTA account takeovers and phishing pages targeting PMS logins is a serious pattern across the industry. Staying vigilant and sharing incidents like this in the community is genuinely useful for everyone.

Thanks