My Wife nearly fell for one a few years back. Our Daughter was going to be home from Uni during Spring and Wife wanted to arrange a few days away in Lincolnshire. She looked on a known website (I won't say the name as they appear to be still active), and sent an email along the lines of "We'd like to stay at Rose Cottage on April 10th to 13th, can you tell us price and availability?" She received a reply "yes that's available for those dates and the price is £375, just BACS to Sort code 123456, Account number 6789101112." I smelt a rat - Firstly I always want to pay with Credit card, and secondly as this was November, why would they want all the money so soon. I replied to the email "It's normal so early on to just require a deposit, not the full amount" and the response was "Oh yes, just try sending £50 and see if that works". More alarm bells, so I sent my next note "My bank is unable to let me send BACS at the moment, but no problem, just give me your address as I have a friend in Lincoln who will go to your address and give a cash deposit" Needless to say we heard no more. I reported it to action fraud. It seems (from press reports) the website my Wife used was genuine, but had been hacked by fraudsters who intercept the enquiry emails and respond "as the owner of the cottage". Always use credit card.