Spain
Portugal
What is social engineering?
Social engineering is a technique used by criminals to trick you into revealing sensitive data that you would otherwise prefer not to disclose. They can use this method to gain access to your Extranet account and steal sensitive information about your guests, such as personal information (name, address, etc.) or credit card details.
How to spot social engineering attempts?
Sometimes it's difficult to recognize a social engineering attempt. This is one reason why this method is so effective and popular among criminals. To avoid becoming a victim of social engineering, remember these key principles:
Scammers make strange or unexpected requests. For example, they may call you or email you and ask you to perform a task for them. In such cases, always ask why they are making the request and who it is for.
Scammers pretend to be people you trust. If someone calls you and claims to work at your property or for us, check the number they're calling from and try to verify the caller's identity. If in doubt, hang up and call them back directly at a phone number you already have.
Scammers use remote desktop access. After gaining your trust, they may try to use software to view and take control of your device, including accessing confidential information. We never ask you to install software or send credentials for a remote access session. Therefore, if you receive such a request, treat it with caution and never automatically agree.
Scammers leave traces of suspicious activity. If you notice any unfamiliar changes or activity on the Extranet or other systems, please report it to us. We will contact you and, if necessary, help determine whether suspicious software has been installed on your device.
Scammers tend to rush things. By calling or emailing you, scammers may claim that your account will be blocked unless you follow certain instructions. Don't let them rush you and treat such requests with caution.
Scammers make mistakes. They often lack a full understanding of the product or process, so they may make strange requests and then try to explain them away with "mitigating circumstances" or "changes in the process." Consider this a red flag and contact us directly if you have any concerns.
