PanicStation.org
UK USA
us Travel, documents & being abroad

What to do if…
you receive a notice that your booking was changed and you suspect someone accessed your travel account

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy USA guide

Short answer

Treat it as possible account takeover: secure the travel account and the email account behind it, then contact the travel company through an official route to stop further changes.

Do not do these things

  • Do not click login, payment, or verification links in the alert message; reach the site or app through the official route you normally use.
  • Do not dismiss small changes, such as a seat change, contact email change, or new saved traveler, until you have checked the booking.
  • Do not send documents, passwords, booking codes, or verification codes to “support” contacted through social media messages, search-result ads, or a number in the suspicious message.
  • Do not post screenshots that show confirmation numbers, ticket numbers, barcodes, or passport details.
  • Do not delay if you travel soon; last-minute account or booking changes can interfere with check-in or identity matching.

What to do now

  1. Check the booking through a safe route

    • Open the provider’s official app, type the known website yourself, or use a phone number from the provider’s official website.
    • Check passenger names, dates, times, airports or cities, ticket status, contact email, contact phone, saved travelers, and payment method.
    • If the message pressures you to act through a link, use that as a reason to verify independently.

  2. Secure the travel account

    • Change the password to one you do not use anywhere else.
    • Turn on two-factor authentication or multi-factor authentication if the account offers it.
    • Sign out of other sessions if that option is available.
    • Remove unfamiliar devices, trusted devices, saved travelers, payment methods, and contact details.

  3. Secure the email account tied to the booking

    • Change the email password and turn on two-factor authentication.
    • Check recovery email, recovery phone, forwarding addresses, mailbox rules, filters, and recent sign-ins.
    • Sign out of unknown devices if the email provider offers that option.

  4. Contact the travel provider

    • Say: “I suspect unauthorized access to my account or booking. Please help me prevent further changes while I verify the reservation.”
    • Ask them to confirm the current itinerary, ticket status, passenger names, contact details, payment method, and whether any voucher, credit, refund, or new ticket was issued.
    • Ask what security restrictions, extra verification, or account notes they can add before any further change.
    • If the booking was made through an online travel agency, contact both the agency and the airline, hotel, or other provider where possible, because different parties may control different parts of the reservation.

  5. Check payment accounts

    • Review the card or bank account used for the booking, including small test charges.
    • If you see an unauthorized charge, contact the card issuer or bank through the number on the card, the official app, or the official website.
    • Follow the bank or card issuer’s dispute and replacement-card instructions.

  6. Save the key evidence privately

    • Keep screenshots or PDFs of the changed itinerary, original itinerary if you have it, confirmation numbers, timestamps, emails, texts, and account login alerts.
    • Store them somewhere private, not in a public post or shared travel group.

  7. If you are traveling soon, protect check-in

    • Confirm that the passenger name matches your ID or passport.
    • Confirm that you can still access check-in, boarding passes, hotel check-in details, or rental pickup details.
    • Ask the provider whether in-person ID checks, extra verification, or a security note can be added before changes are accepted.

  8. Use official U.S. help channels if identity details or money were misused

    • If personal information was misused, use the federal identity theft recovery site to document what happened and get a recovery plan.
    • For an air-travel consumer issue that the airline or ticket agent does not resolve, you can use the U.S. Department of Transportation air consumer complaint route.
    • For broader travel complaint routing, use the USAGov travel complaints page.

What can wait

  • You do not need to overhaul every account right now; start with the email account, the travel account, and the payment method involved.
  • You do not need to decide today whether to make a formal complaint; first stop further changes and confirm the booking.
  • You do not need to solve the whole trip at once; focus on the next travel step, such as check-in, arrival, hotel, or return travel.
  • You do not need to publicly warn others with screenshots while confirmation numbers or personal details are still visible.

Important reassurance

A changed booking notice can feel urgent because it affects your ability to travel. A focused sequence usually helps: verify through a safe route, secure the accounts, contact the provider, and check the payment method.

Scope note

These are first steps for a suspected travel-account compromise. Later decisions about identity recovery, formal disputes, replacement cards, travel changes, or specialist help can wait until the immediate booking risk is stabilized.

Important note

This is general information, not legal, financial, cybersecurity, or other professional advice. Providers, banks, card issuers, and travel agencies use different procedures, so use official support channels when you need account-specific help.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us