Austria's official fraud watchlist just added two more fake booking sites
Key Highlights
- 1
- 2
- 3
+3 more in the takeaways below
Austria's official fraud watchlist added two more fake vacation-booking websites on September 14, 2026, bringing the running total to 112 confirmed fraudulent sites. One of the new entries copies the name of a real, working alpine hut in Tyrol.
That matters right now because the next twelve weeks are exactly when Austrians and visitors alike lock in ski chalets, mountain huts, and Christmas-market apartments for winter. Watchlist Internet, the country's government-backed fraud tracker, added three new fake booking sites in the last twelve days alone. The pattern behind them is worth two minutes before you send anyone money for a place to stay this winter.
- 112 fake sites, and growing. Austria's Watchlist Internet lists 112 fraudulent vacation-booking platforms as of September 18, 2026, three more than on September 6.
- Real names get copied. The newest fake, dresdnerhuette.de, impersonates a real 1875 alpine hut in Tyrol whose actual site is dresdnerhuette.at.
- Bank transfer is the trap. Every listed site pressures victims to pay upfront by bank transfer, which offers no chargeback protection.
- The fix takes under two minutes. Check the domain against the watchlist, verify the address, and never wire money for a listing you found outside a platform or a hotel's own domain.
- If you already paid, call your bank the same day you notice, not tomorrow.
What just got added to Austria's fraud watchlist
Watchlist Internet is run by the Österreichisches Institut für angewandte Telekommunikation (ÖIAT) with Austria's Internet Ombudsstelle. It names its funders openly on its own about page: Austria's Federal Ministry for Labour, Social Affairs, Health, Care and Consumer Protection, the Federal Ministry of the Interior's Criminal Police Office, and the Austrian National Bank. That is about as official as a fraud list gets in Austria.
Its own description of the scheme is blunt: criminals publish fake booking platforms, lure victims with low prices and attractive photos, then pressure them to pay in advance. Anyone who does loses the money and arrives to find no room waiting. Two entries added on September 14 fit that pattern exactly.
dresdnerhuette.de borrows the name of the real Dresdner Hütte, a 2,308-metre hut below the Stubai Glacier that has run under the German Alpine Club's Dresden section since 1875, whose genuine site is dresdnerhuette.at. landhotel-wachau.de trades on the Wachau valley's reputation for countryside guesthouses along the Danube. A third addition, four days earlier, uses a scrambled domain with no place name at all, so branded fakes and anonymous ones are running side by side on the same list.
We'd call the .de-versus-.at detail the single most useful thing in this whole story. A real Tyrolean hut on an Austrian domain, copied onto a German one, is a mismatch you can check in the time it takes to search the name.
Who this actually targets
This scam targets anyone booking direct, meaning outside a major platform or a property's own verified domain. That covers a common habit: searching a village name plus "Ferienwohnung" or "chalet," clicking whatever looks legitimate enough, and paying by bank transfer because the price is good.
Two earlier entries show the pattern isn't new. salzburgerhof-dienten.com, listed August 31, targets Dienten am Hochkönig, a real ski village in Salzburg province. babymio-tirol.com, listed August 24, borrows Tyrol's name the same way. The target shifts; the mechanism, a convincing name plus an upfront transfer, doesn't. It's the same trick behind the cloned Airbnb listings travelers have been warned about all year, just running on a standalone site instead of inside a platform.
The check before you pay
Here's the check to run before you pay for anything booked outside a major platform. It takes under two minutes.
- Search the exact domain plus "watchlist" or "betrug." If Watchlist Internet or a consumer-protection body already flagged it, stop there.
- Check the legal notice (Impressum). Austrian and EU sites must publish a company name, address, and phone number; a missing or vague one is a stop sign on its own.
- Drop the listed address into Google Maps. A property that doesn't resolve to a real building is fake.
- Compare the price against two or three real listings for the same village and dates. Roughly half of everything nearby is the bait, not a bargain.
- Reverse-image-search the main photo. The same photo on three unrelated "properties" is the clearest tell there is.
- Pay only through the platform you booked on, or by credit card. Never wire money directly to a private account.
Don't trust a site because it looks professional. Watchlist Internet's own description names "attractive photos" as part of the bait, not a reassurance. We'd treat a slick, well-designed listing as a bigger reason to check, not a smaller one.
How the scam actually works, start to finish
The scam works the same way almost every time. A site appears with attractive photos, a real-sounding name borrowed from a village or landmark, and a price that undercuts every comparable listing nearby, usually surfacing through a normal search rather than an ad. Once you're interested, the site pushes full payment upfront by bank transfer, framed as standard practice for "limited availability." Wire the money and there is no dispute process behind it. Unlike a card payment or a booking made through a major platform, a transfer to a stranger's account has no built-in way back once it clears.
Companies are required to maintain a complete Impressum, with name, address, email, and phone number. Search for reviews of the provider, and check the address on Google Maps to filter out fake locations.
Daniela Seis, consumer protection advocate, Arbeiterkammer Kärnten
The European Consumer Centre flags the same signals from the buyer's side, plus one more: a request to communicate or pay outside the platform where you first found the listing. If you booked through a major platform, its advice is to keep every message and payment inside it, never in a side conversation with the "owner." That same pressure to move a conversation off-platform is exactly what powered the WhatsApp scam wave spoofing Booking.com earlier this year, just delivered by message instead of a standalone website.
| Payment method | Buyer protection | Use it? |
|---|---|---|
| Bank transfer to a private account | None once funds clear | No |
| Credit card, direct to the property | Chargeback possible | Only with a verified business |
| Payment inside Booking, Airbnb, or similar | Platform dispute process | Yes |
If you already paid
If you've already paid, move fast. A bank transfer can sometimes still be recalled in the first hours, but the window closes quickly once the funds clear.
- Call your bank today, not tomorrow, and ask about a SEPA recall or fraud dispute on the transfer.
- Report the site to Watchlist Internet through its reporting form, so it's flagged for the next searcher.
- File a report with Austria's Internet Ombudsstelle, which handles exactly this kind of complaint.
- Rebook through a platform with buyer protection before your travel dates get any closer.
Look, none of this undoes a bad transfer by itself. But reporting it fast is the only thing that gives you, or your bank, a real chance of clawing money back.
What to watch next
Watch this list over the next few months, because it isn't slowing down. Three additions in twelve days is a faster pace than earlier in 2026, and it lines up with exactly the weeks when ski-season and Christmas-market bookings pick up. We'd expect the count to keep climbing through December. If you're booking a chalet or apartment for this winter, check the domain against the watchlist again closer to your travel dates, not just once now. For everything else scammers run on travelers right now, our roundup of the worst tourist scams by region covers the rest of the map.
Frequently Asked Questions
Is Watchlist Internet an official Austrian government source?
It's run by a nonprofit institute, ÖIAT, alongside Austria's Internet Ombudsstelle, and funded in part by two federal ministries and the Austrian National Bank. It isn't a police agency, but it's about as close to an official fraud tracker as Austria has.
How do I know if a specific site is already on the watchlist?
Check whether that exact site is already on the watchlist using the search box on the Urlaubsbuchung list page. A match means stop; no match doesn't mean the site is safe, since new fakes appear faster than any list can catch every one.
Is booking through a major platform completely safe from this?
It's meaningfully safer, since the platform holds your payment and offers a dispute process. The risk resurfaces if a "host" asks you to finish the booking off-platform by bank transfer, a request no platform ever makes on a host's behalf.
Why do these fake sites specifically copy real Austrian huts and villages?
A recognizable name reads as trustworthy at a glance, and it lets the fake rank for searches the genuine property already earns. dresdnerhuette.de exists because dresdnerhuette.at is a real, searched-for name.
What payment method should I refuse for a vacation rental?
Refuse any request for a direct bank transfer to a private account, especially before you've verified the property independently. Credit cards and in-platform payments both carry some dispute protection that a transfer doesn't.
Key Takeaways
- Check the domain first. Search it against Austria's Watchlist Internet before you pay, not after.
- A mismatched domain is a tell. The fake Dresdner Hütte site runs on .de; the real one runs on .at.
- Never wire money to a private account for a booking found outside a platform with buyer protection.
- Reverse-image-search the main photo if a listing looks too good for the price.
- Move within hours if you already paid, and report the site so it's listed for the next searcher.
- Once a booking is genuinely confirmed, tools like TripProf can keep the confirmation, receipt, and host's contact details together, so the paper trail is ready if a dispute ever comes up.
Sources
- Watchlist Internet: Liste betrügerischer Urlaubsbuchungsplattformen (checked September 18, 2026)
- Watchlist Internet: Betrug! Vorsicht vor dresdnerhuette.de (listed September 14, 2026)
- Watchlist Internet: Betrug! Vorsicht vor landhotel-wachau.de (listed September 14, 2026)
- Watchlist Internet: Über uns (operator and funding)
- Das Verbraucherschutzforum: Warnung vor betrügerischen Urlaubsbuchungsplattformen (September 6, 2026)
- Europäisches Verbraucherzentrum: Betrug bei der Ferienwohnung
- ORF Kärnten: Betrug bei Urlaubsbuchung im Internet (July 12, 2025)
- ORF Kärnten: Urlaub - Vorsicht vor Fake-Angeboten (July 16, 2025)
- Tirol.at: Dresdner Hütte, Stubaier Alpen
- Dresdner Hütte: official site
Keep Reading
More travel tips and guides picked for you
The vignette scam targeting eight European countries this autumn
Fake toll-sticker sites just got a fresh warning from consumer-protection agencies in Germany and Switzerland. Here is who is being targeted, what the scam looks like, and the eight official links to bookmark before your next road trip.
Delta's new LAX to Manila nonstop flight: how to plan the family trip
Delta launches the first nonstop LAX to Manila flight on March 28, 2027, ending Philippine Airlines' years-long monopoly. Here's how to time the booking, add a second Philippine stop, and what the whole trip actually costs.
Egypt visa for UK citizens in 2026: what you actually pay
Egypt's e-visa and visa-on-arrival fees both jumped to \0 in 2026, and a free Sinai-only stamp covers four resorts, not the whole country. Here's exactly what UK travellers pay now, and where the free stamp runs out.