Not only this. Last week I got repeated messages from a hotel in Mexico requesting me to verify the booking using a link. The link was posted on the genuine Booking.com site as a message.
It just said they will debit one Dollar from the credit card to verify and confirm the booking. My wife usually make all the bookings and changes and asked me to confirm the booking with hotel.
Clicking the link takes you to a Booking.com look alike page (but fake) where you are expected to key-in your credit card details. I sent a message to booking.com help line, within a few minutes one of their reps called me. When I explained, she immediately called the hotel in Mexico and verified the booking is there, they do not need any further confirmation and for us to pay at the hotel.
Also she immediately flagged the issue with their security team to investigate further and take action.
PS: Send details to booking.com about this one too. Make them aware.
