Bitdefender flags WhatsApp phishing scam impersonating hotels

Just as Romanians start booking summer getaways, Bitdefender — the Bucharest-founded security firm that remains the region's clearest cyber export — is raising the alarm on a WhatsApp phishing campaign in which scammers pose as hotels to defraud travellers.

What Bitdefender actually flagged

According to Bitdefender researchers, the scheme relies on WhatsApp messages impersonating hotels to reach Romanian vacationers. The pretext is the trust a traveller places in a booking confirmation or a message that appears to come from the property they reserved — an angle timed to the vacation season, when guards are down and payment details flow freely.

The mechanics, as described

• The channel is WhatsApp, not email — meeting victims where they already coordinate travel plans.
• The lure is hotel impersonation, exploiting an existing or expected booking relationship.
• The target set is Romanian consumers heading on holiday.

Why it matters for the region

The detail worth underlining for anyone building in Eastern Europe is the channel shift. Phishing has migrated off email and onto messaging apps where link-scanning, spam filters and corporate security stacks have far less reach. That's a structural problem: WhatsApp is effectively the default booking-and-service chat layer across Romania and the Balkans, and it lacks the mature anti-fraud tooling email spent two decades building.

That gap is precisely the market Bitdefender and every consumer-security and travel-tech founder in the region should be reading closely. Hospitality is a soft underbelly — fragmented properties, seasonal staff, third-party booking intermediaries — and each handoff is an impersonation opportunity. For fintechs and OTAs operating in RO/CEE, the reputational cost of a guest defrauded "in your name" lands on the platform, not the scammer.

The second-order read: expect more messaging-native fraud detection, verified-business-account pushes, and identity layers for hospitality bookings. Bitdefender publishing this is also a distribution play — consumer-facing threat advisories keep it top-of-mind in its home market, where it competes for mindshare against global suites.

The founder & VC angle

For Romanian and CEE founders, this is a demand signal in plain sight: anti-scam infrastructure for messaging platforms and travel commerce is underbuilt relative to how much of daily life now runs through chat apps. The customers — hotels, OTAs, payment providers — have a direct financial and reputational incentive to solve it, which is the kind of buyer VCs like.

Key takeaways

• Bitdefender has flagged a WhatsApp phishing campaign impersonating hotels targeting Romanian travellers — a signal that fraud is moving onto messaging apps where defences are weakest.
• Hospitality's fragmented, seasonal structure makes it a prime impersonation vector, putting reputational risk on platforms and payment providers, not just victims.
• The gap points to a real regional opportunity in messaging-native fraud detection and verified-business identity for travel commerce.