Telekopye scammer network expands its scope to Booking and Airbnb

Researchers at ESET have discovers that the scam network Telekopye has expanded its operations to popular accommodation booking platforms such as Booking.com and Airbnb. Telekopye is a toolkit that works like a Telegram bot.

The bot is used by dozens of scam groups with sometimes thousands of members to steal millions of euros from their victims.

In the Telekopye scammer network, the scammers call the targeted buyers and sellers “mammoths.” The scammers require little to no technical knowledge – Telekopye takes care of everything in a few seconds.

According to ESET, booking fraud started to emerge in 2024. Scammers send an email to a user of one of these platforms, stating that there is a problem with the payment of their booking. The email contains a link to a well-designed, legitimate-looking web page that mimics the exploited platform. The page contains pre-filled information about a booking, such as check-in and check-out dates, price and location.

The scammers use compromised accounts of legitimate hotels and accommodation rental companies on the platforms, which they likely obtained by purchasing stolen credentials on cybercriminal platforms.

In late 2023, Czech and Ukrainian police arrested dozens of cybercriminals using Telekopye in two joint operations.

Source: www.emerce.nl