If you’ve ever used Booking.com, they’ve been hacked and customer data stolen, so you can expect a wave of very plausible looking scams, phishing etc. That means the scammers can refer to your actual personal details and actual bookings you’ve made in the past to convince you their scam is legitimate notification.

https://www.theguardian.com/technology/2026/apr/13/booking-com-customers-hack-exposed-data