Cameron Craig received a WhatsApp message regarding his upcoming booking at Cable Beach Club in Broome last week.<\/p>\n
![\"A](\"https:\/\/www.newsbeep.com\/au\/wp-content\/uploads\/2026\/11\/f45a85ecbdb98e7d2f71a2edecc9ce2d.jpeg\")
<\/p>\n
The WhatsApp message sent to Cam Craig regarding his upcoming booking was a phishing scam. (Supplied: Cam Craig)<\/p>\n
The Sydney resident said the text requested him to provide his payment details through a link, or risk losing his booking.<\/p>\n
“I work in tech, so I’m pretty savvy towards scams, but because it had some authentic details I thought it could be real,” he said.<\/p>\n
The message included details including the correct dates of his planned trip and his full name.<\/p>\n
Mr Craig said he clicked on the link and entered some of his credit card information but the session timed out.<\/p>\n
![\"Cam](\"https:\/\/www.newsbeep.com\/au\/wp-content\/uploads\/2026\/11\/53f87a837a7e699f2b2b29ff9691502d.jpeg\")
<\/p>\n
Cam Craig has been travelling to different destinations around Australia with his son. (Supplied: Cam Craig)<\/p>\n
He later realised the message was sent by an international number and the reservation code was different.<\/p>\n
Mr Craig said he alerted Cable Beach Club, which then notified guests.<\/p>\n
The resort has been contacted for comment.<\/p>\n
More Kimberley hotels impacted<\/p>\n
Kimberley Accommodation Group, which also uses RMS Cloud as its third-party reservation system, received reports from guests who had received similar phishing messages.<\/p>\n
Managing director Dannielle Hart said hackers used genuine booking details and asked customers to confirm card details or make a payment.<\/p>\n
![\"A](\"https:\/\/www.newsbeep.com\/au\/wp-content\/uploads\/2026\/11\/dc32c446f857dd35ba90519818d8d1c2.jpeg\")
<\/p>\n
Kimberley Accommodation Group owns venues across the region including the Kimberley Hotel in Halls Creek. (Supplied: Facebook)<\/p>\n
Ms Hart said the company was not able to comment on the number of customers impacted, or any customer financial losses at this stage.<\/p>\n
“Our advice to guests is not to respond to unexpected messages, click links, provide card details or make payments in response to communications about their booking,” she said.<\/p>\n
RMS confirmed the unauthorised activity identified within the RMS environment had been contained yesterday.<\/p>\n
The provider said investigations were continuing as it assessed the full scope and impact of the incident.<\/p>\n
More stories from Northern WA<\/p>\n
Chief executive Adam Seskis said scams had become “increasingly sophisticated” in a statement, but confirmed credit card and payment details were not involved in the breach.<\/p>\n
Evolving scams<\/p>\n
Cybersecurity lecturer Brianna O’Shea said phishing scams had evolved over time to become more convincing.<\/p>\n
“Early attempts relied on generic mass emails with obvious spelling errors, poorly designed fake logos and simple web links,” she said.<\/p>\n
“But nowadays these scams work because they weaponise urgency, fear and authority and trust.”![\"A](\"https:\/\/www.newsbeep.com\/au\/wp-content\/uploads\/2026\/11\/f7e63baf57d5338f6f5a560909238d99.jpeg\")
<\/p>\n
Brianna O’Shea says more accommodation providers could be affected. (Supplied: Brianna O’Shea)<\/p>\n
The Murdoch University academic said third-party systems were a “lucrative target” for hackers.<\/p>\n
She said the breach could also have implications for FIFO workers and independent bed and breakfasts, where RMS was used to support bookings in temporary accommodation.<\/p>\n
“This is just the tip of the iceberg,” Dr O’Shea said.<\/p>\n
“It’ll be up to the owners to reach out to their customers and provide them with that support.”<\/p>\n","protected":false},"excerpt":{"rendered":"A cybersecurity expert says scammers are using fear and “weaponising urgency”, as holiday-makers and hotels in Western Australia’s…\n","protected":false},"author":2,"featured_media":950498,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[64,63,517407,101808,99,517408,517401,43851,517405,517402,517404,517403,24514,53555,517406,71544],"class_list":["post-950497","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-au","tag-australia","tag-broome-accommodation","tag-broome-news","tag-business","tag-cable-beach-accommodation","tag-cable-beach-club","tag-cyber-security","tag-is-this-email-from-my-hotel-a-scam","tag-kimberley-accommodation-group","tag-kimberley-holiday-scam-warning","tag-kimberley-hotel-scam-warning","tag-kimberley-news","tag-phishing","tag-rms-data-breach","tag-scams"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/950497","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/comments?post=950497"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/950497\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media\/950498"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media?parent=950497"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/categories?post=950497"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/tags?post=950497"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}