TUI Booking Scam UK: How to Spot Fake Holiday Offers and Protect Yourself
Scammers are sending fake TUI booking confirmations to steal your money and holiday details — here's how to spot them and stay safe.
What is this scam?
TUI booking scams target UK holidaymakers through fake emails, texts, and copycat websites designed to look like the genuine TUI platform. Scammers either pose as TUI support staff claiming there's a problem with your booking, or they send unsolicited fake confirmation emails for holidays you've never booked. The goal is to trick you into clicking malicious links, entering payment details, or transferring money for alleged 'payment issues' or 'security verification.' Some scammers also target people who have genuinely booked with TUI by intercepting their confirmations or sending follow-up messages pretending to be customer support.
The scams are convincing because they use TUI's branding, logos, and language, and they often know small details about real bookings. Victims either lose money directly, have their banking details stolen for fraud, or find their identity used for further crimes.
Warning signs to look for
- Unexpected emails or texts about a TUI booking you didn't make, or urgent action needed on a real booking.
- Links in the email that don't match the official TUI domain (tui.co.uk) — look for slight misspellings like 'tui-confirm.com' or 'tuibooking-update.com'.
- Requests to 'verify your payment' or 'confirm security details' by clicking a link or entering card information into an email.
- Messages claiming your booking is 'at risk' or will be 'cancelled within 24 hours' unless you take immediate action.
- Spelling, grammar, or formatting errors in the email — genuine TUI messages are professionally written.
- Sender address that isn't from a TUI domain (e.g., 'support@tuiholiday.net' instead of a genuine TUI address).
- Requests for payment via unusual methods like gift cards, wire transfer, or cryptocurrency instead of your debit or credit card.
- Generic greetings like 'Dear Valued Customer' instead of your actual name in a genuine booking confirmation.
How this scam works step by step
The scam typically begins with a phishing email or text message that appears to come from TUI. It may reference a booking you've made, or claim you've won a holiday discount — either way, it creates urgency by saying action is needed immediately. The message contains a link that takes you to a fake TUI website, which looks nearly identical to the real one. When you enter your email address, password, name, address, or payment card details on this fake site, the scammers capture everything.
Alternatively, the message might claim there's a problem with your payment and direct you to 'update your card details' through a link. Once scammers have your information, they can book holidays in your name, steal from your bank account, or sell your personal data to other criminals. Some scammers go further by sending follow-up emails asking for additional 'security verification' or claiming you need to pay a deposit to release a cancelled booking. By the time victims realize it's fake, the money has been transferred abroad and the fake account is closed.
How to verify if it is genuine
If you receive a TUI email or text claiming action is needed, do not click any links in the message. Instead, open a new browser window and go directly to tui.co.uk by typing the address yourself. Log into your account and check your bookings section — if there's a problem, it will appear there, and you can contact support through the website. Check the sender's email address carefully: genuine TUI transactional emails come from addresses ending in @tui.co.uk or @tuimail.com.
You can also call TUI's customer service directly on 0871 231 1537 (from a number you have on record) to confirm whether an email or text is real. Never click links in unexpected emails — genuine TUI will not ask you to 'verify payment' or 'confirm details' by clicking an email link. If you're unsure, search 'TUI scam alert' on the NCSC website or check our guide on Is This Website a Scam? A Practical Checklist Before You Buy for how to verify a website's legitimacy.
What to do if you have already interacted
If you've clicked a link in a suspected scam email but didn't enter any information, your risk is lower — close the page immediately and don't re-open it. If you entered your password, log into your TUI account right away and change your password to something strong and unique. If you entered your card or bank details, contact your bank immediately on the number on the back of your card and ask them to monitor your account for suspicious activity — they can block the card if needed.
Check your bank statements for unauthorized transactions and report any fraudulent charges to your bank within 10 days. If money has been sent, contact your bank immediately; depending on how it was sent (card, bank transfer, etc.), they may be able to stop or reverse it. Register with Action Fraud to create a record of the crime, even if you didn't lose money. Monitor your credit file using Experian, Clearscore, or Equifax to catch any identity fraud early. Change passwords on any other accounts using the same email address.
Reporting this scam in the UK
Report the scam to Action Fraud, the UK's national fraud reporting service, by calling 0300 123 2040 or visiting their website. You'll need the sender's email address, phone number, or website URL, and details of what happened and when. Report the phishing email directly to the NCSC Suspicious Email Reporting Service by forwarding it to report@phishing.gov.uk — they monitor patterns and can take action against fake sites. If you received a text message, forward it to 7726 (which spells 'SPAM').
Tell TUI directly by contacting their customer service team through the official TUI website and reporting the fraudulent email or text — they track these and alert customers. If you've lost money, report it to Citizens Advice consumer helpline on 0808 223 1133 for further support and advice. Keep copies of all emails, texts, and screenshots as evidence. Report the fake website URL to Google by visiting their phishing report page, which helps remove it from search results and protects other users.
Frequently asked questions
Is TUI a legitimate company, or are all TUI bookings a scam?
TUI is a legitimate UK travel company and one of the UK's largest holiday retailers. The scam is perpetrated by criminals impersonating TUI, not by TUI itself. If you book directly through tui.co.uk or a TUI shop, you are safe — the risk comes from unsolicited emails, texts, or websites claiming to be TUI.
I've already sent money to what I think was a fake TUI booking. Can I get it back?
Contact your bank or payment provider immediately using the number on your card or statement — if you sent money by debit card or credit card, they may be able to reverse the charge if you report it quickly. If you transferred money via bank transfer, inform your bank and they can try to recover it, though this is harder. Report the fraud to Action Fraud on 0300 123 2040. Your bank will ask you questions about the transaction, so have the scam email or text ready to show them.
I clicked a link in a TUI email and landed on a website that asked for my password. Should I assume my TUI account is hacked?
Change your TUI password immediately using a different device if possible, then check your booking history for unauthorized changes. If you also used that password on other accounts, change those too. If your TUI account shows bookings you didn't make, contact TUI customer service on 0871 231 1537 to report unauthorized access. Monitor your email and bank account closely for the next few weeks.
How do I report a suspected TUI scam?
Report it to Action Fraud on 0300 123 2040 or via their website, forward the phishing email to the NCSC at report@phishing.gov.uk, and text suspicious TUI text messages to 7726. Contact TUI directly through tui.co.uk to alert them. Keep all evidence — screenshots, email headers, the sender's email address — as this helps authorities investigate.