Forged bank transfer receipts: verifying a prepayment before you confirm a booking
A forged receipt looks real but proves nothing. Confirm bookings only after the credit appears in your bank account. Learn the checks that stop fraud.
Contents
Key takeaways
- A receipt is a claim about a payment; the hotel's own account statement is the payment.
- A screenshot, a PDF and a forwarded email are all copyable and editable, so none of them proves that money moved.
- Match three things in the hotel's account before confirming: the amount, the sender's name and the reference the reservation carries.
- A document can be completely genuine and the money still not be the hotel's, if the IBAN on it was swapped.
- Hold the room with a dated expiry instead of confirming, and tell the guest in plain words what will release it.
A bank transfer receipt (dekont) is a document, not money. A forged one is a real-looking PDF or screenshot with an altered amount, date, IBAN or reference. The only check that settles it is the credit appearing in the hotel's own bank account, matched on amount, sender and reference. Confirm the booking only after that.
A reservation request arrives at 22:40 with a PDF attached: the amount is right, the hotel's IBAN is right, the guest's name is right. The desk confirms the booking and releases the room from sale. Three days later the account shows nothing, and the room has already been given to someone else. This is how a fake bank transfer receipt defeats a hotel booking process, and it takes one rule to stop it. After reading this you will know how these documents are built, why no document can settle the question, and how to word a hold that keeps both the room and the guest.
How does a forged bank transfer receipt work?
A forged receipt is a convincing document built around a payment that was never made, was made for less, went to a different account, or was cancelled before it settled. The forger does not need to fake a bank. They only need to fake a moment of it.
The most common method is editing a real receipt. A genuine document from another transaction is opened in an image editor or even a browser, and the amount, date, sender name or reference is changed. The bank logo, layout and fonts stay intact, because they were never touched. What changes is the number that matters.
A second method is IBAN swapping. The document is completely genuine and the money really left the sender's account, but it went to an account that looks like the hotel's. Two characters differ, or the bank code points to another institution. The sender may even believe they paid you. Compare the IBAN on the receipt character by character with the one printed on the hotel's own invoice, not with the one in the message.
A third method produces a document with no credit behind it: a payment instruction created in a banking app, or a same-bank transfer cancelled before it is processed, can leave a screenshot and no money. A fourth pairs a real small transfer with an edited document showing the full prepayment. All of them work best under timing pressure: late-night arrivals, weekends, public holidays and long weekends, when nobody wants to call the bank or wait for a colleague.
The motive is usually a held room rather than a stolen stay. The sender wants confirmed inventory or a voucher, and may never arrive. And remember that a document can be real and still belong to another hotel or another reservation, so check the reference against your own booking, not just the name. Forged receipts often arrive alongside other tricks; the same pressure tactics appear in fake booking messages and extranet takeovers.
Watch outA genuine document is not the same as a genuine payment
If the IBAN on the receipt differs from the IBAN on the hotel's invoice, the money went somewhere else even though the sender really paid.
Why is a screenshot not a payment?
Because a screenshot shows what a screen displayed, not what a bank recorded. It can be produced, edited or staged in minutes, and it proves nothing about the hotel's balance.
Separate three moments. The payment order is the sender instructing their bank. The settlement is the banks moving the money between them. The credit is the money sitting in the hotel's account. A receipt usually shows only the first, and a screenshot may not even show that. A banking app that says the transfer was sent is describing the sender's instruction; the sender's own account can be debited and later corrected.
PDF receipts are text and images inside a file, and they can be edited in a browser or an image editor without leaving an obvious trace. A genuine receipt attached to the wrong booking is a common and innocent-looking failure: the money exists, but it belongs to another guest, another hotel or another date. And a document stored in the guest's file inside the hotel's own system is still a document. Filing it does not verify it.
The only artefact that counts is the line in the hotel's own account, seen by a named member of staff.
| What arrives | What it proves | What to do |
|---|---|---|
| Screenshot of the guest's banking app | That a screen displayed something | Ask for nothing more; check your own account |
| PDF receipt with a bank logo | That a document exists | Compare IBAN and reference, then check the account |
| A transfer or SWIFT reference number | That an instruction was created | Look for the matching credit; a reference alone is not settlement |
| A statement page sent by the guest | That the sender's account was debited | Debits can be recalled or reversed; check your account |
| A line in the hotel's online banking | That the money is in the hotel's account | This is the check; keep a copy of that line |
If you are deciding how much to collect in advance at all, see prepayment, deposits and installments on direct bookings. The verification rule below applies to every one of those routes.
How do you check a transfer in the hotel's own account?
Open the hotel's bank account, not the guest's file, and match the credit on three fields: amount, sender and reference.
Decide who may confirm. Name one person per shift, front office by day and night audit by night, and write it into the procedure so nobody confirms "because the receipt looked right". Check online banking or the account statement itself, never a notification email or an SMS alert, which can be forwarded or edited.
Match the amount exactly, including any charges the sender chose to pass on, and note when a prepayment arrives short. Record the sender's name even when it is not the guest's name, and note the relationship: spouse, friend, employer, agency. Read the description or reference field against the reservation number or the name on the booking. Check the currency and the value date; a foreign-currency transfer that arrives in a different currency has to be reconciled before it is treated as full payment. Finally, attach a copy of the account line to the reservation, with the name of the person who checked and the time.
ChecklistBefore you confirm
- The credit is visible in the hotel's own account, not in a notification
- The amount matches the agreed prepayment after charges
- The sender's name is recorded with any relationship to the guest
- The reference matches the reservation
- The value date is today or earlier
- The currency is the one the booking was priced in
- The checker's name and the time are on the reservation
- A copy of the account line is attached
How do you hold a booking without offending the guest?
Say exactly what you are doing and when it ends: the room is held, not confirmed, until the credit appears in the hotel's account.
Never write that you suspect a forged document. Write what you can see: the payment is not visible in our account yet. Give the guest the reference to quote and ask for the sender's name, so the matching is easy on both sides. Put a date and a time on the hold, tied to the arrival date and the cancellation policy, and say what happens when it passes.
Make the hold real in the system: a provisional status that expires, not a confirmed reservation with a note in the comments. A confirmed booking that nobody releases is how the room is lost. Offer a second route: a payment link by card, payment at the desk against a guaranteed hold, or an agency voucher, depending on what the hotel accepts. Card payments have their own desk checks, especially when the payer is not the guest; see paying with someone else's card at the desk. Send a short confirmation the moment the credit lands, so the guest sees the hold end and the booking begin.
TipWording to adapt
"We have your reservation request and the room is being held for you until [date and time]. We confirm a booking when the transfer appears in our bank account, and it has not appeared yet. When you send it, please put [reference] in the description and reply with the sender's name so we can match it. If the payment is not visible by [date and time], the room returns to sale and we will tell you."
Do agency and company transfers need a different check?
Yes. With an agency or a company the document is rarely the weak point; the account the money left, and who was entitled to send it, are.
Agency business often runs on contracted credit terms, which means no transfer at all. Confirm against the contract and the voucher, not against a receipt. A third-party payer is normal in this world: a company pays for a guest, an agency pays for a group. Record who paid, because the refund and the invoice follow the payer.
Check that the sending account belongs to the contracting company rather than an employee or an unrelated business, and call a number you already hold, never one supplied in the message. Treat a request to change bank details as a separate decision, confirmed by voice with a known contact, whatever document arrives with it; this is the same discipline that protects against voice clones and fake payment documents. For group blocks, match each partial deposit to the block and keep the running total visible, so a second forged document cannot top up a real payment. Reconcile agency and company transfers at month end against the city ledger, not only at the moment of booking.
| Who is paying | What to check | What to record |
|---|---|---|
| The guest from their own account | Sender name matches the guest | Sender name and reference |
| A relative or friend | The guest's name in the reference and who actually paid | Payer name and relationship |
| A company | The sending account belongs to the contracting company | Company name and tax number for the invoice |
| An agency with credit terms | The contract and the voucher, not a receipt | Agency, voucher number, due date in the city ledger |
| An agency prepaying per booking | The agency's own account and the booking reference | Agency, reference, amount |
What do you do when you suspect a forged receipt?
Do not confirm, do not accuse, and keep everything: the document as it arrived, the message, the reservation record and the result of the account check.
Keep the file exactly as received rather than re-saving, cropping or forwarding it, and keep the message with its headers. Write a short internal note on the reservation: what arrived, when, who checked, what the account showed. Reply to the guest in neutral terms and ask them to check with their own bank, because a genuine sender can usually produce a bank-side trace.
Ask the hotel's bank what it can see about the transfer and whether a recall is possible; the sender's bank is the guest's to contact. If money is lost, take advice from the bank and a legal adviser before deciding what to file and where, since reporting routes and thresholds differ by case. Do not publish the guest's name, document or account details in internal chat groups or on social media.
NoteKeep for every suspected case
The document as received, the message with headers, the reservation timeline, the account check result with the time, the name of the person who checked, and every reply from the guest. A pattern only becomes visible when these records exist across months.
How do you train the desk on forged receipts?
Run a short drill with invented documents, so the desk practises the check before a real one arrives at 23:00 on a Friday.
Build five or six invented scenarios and rotate them, so staff learn the pattern rather than one document. Rehearse one rule above all: no confirmation without a line in the hotel's own account. Test the night shift and the weekend separately, because that is when the pressure and the gaps are. Practise the guest call out loud, in two minutes, including the sentence that holds the room without accusing anyone.
Score the drill on one thing only: was the booking confirmed before the account was checked. Repeat monthly and after every staff change, and keep the scenarios in the front-office manual.
ChecklistDrill scenarios
- An edited amount on a real receipt
- A genuine transfer sent to a lookalike IBAN
- A same-bank transfer cancelled before processing
- A payment from a company account for a guest booking
- A genuine payment that does appear in the account
- A receipt that belongs to another hotel's booking
Write the rule down today
Give the desk one sentence: a reservation is confirmed only when the credit is visible in the hotel's own account, and every held booking carries an expiry that someone owns. The rest of this article is that rule applied: how a forged receipt is built, why a screenshot cannot settle it, how to word the hold, and how agency and company payments need a second look at the sending account. Print the rule, name the people who may confirm, and run the first drill this month.
Frequently asked questions
Can a bank transfer be reversed after it reaches the hotel's account?
A credit can be recalled or reversed in some situations, such as a fraud report or a bank error, so a very early arrival on a high-value booking is worth a second look. The hotel's bank is the only party that can say what applies to a specific transfer. Do not rely on a fixed time window you have heard from colleagues.
The guest sent a photo of the receipt from the bank branch. Is that enough?
No. A branch receipt is still a document about an instruction, and it can be edited or belong to another transaction. The check is unchanged: the credit in the hotel's own account, matched on amount, sender and reference. A photo of paper is no stronger than a screenshot.
Does a SWIFT or EFT reference number prove the money was sent?
It shows that an instruction was created and gives the bank something to trace. It does not show settlement. Look for the matching credit before confirming, and quote the reference when you ask the bank about a transfer that has not arrived.
How long should a held booking stay held?
There is no universal number. Tie the expiry to the arrival date, the cancellation policy and how far ahead the booking is, then make the expiry visible to the guest and to the system. A hold without an expiry is a confirmed booking in practice.
Should the hotel stop accepting bank transfers and take cards only?
That is a policy choice, not a fix. Card payments carry their own checks at the desk, and transfers remain useful for agencies, companies and guests abroad. What matters is that every payment route ends in the same place: a visible credit or an authorised card transaction, checked by a named person.