Spanish Hacker Arrested for Booking Luxury Hotels for One Cent

On February 18, 2023, Spanish police arrested a 20-year-old man suspected of hacking a hotel booking website to reserve luxury accommodations for as little as one cent. This incident marks the first known case of cybercrime utilizing such a method, where the hacker manipulated the payment validation system of an electronic payment platform, allowing bookings to appear fully paid despite the minimal charge.

The Straits TimesRFI (Radio France Internationale)

The suspect, a Spanish national, allegedly exploited the website's payment system to book rooms that typically cost up to €1,000 (approximately $1,200) per night. Although only one cent was charged for these reservations, the hacker reportedly consumed minibar items during his stays and occasionally left bills unpaid. At the time of his arrest, he was staying at a luxury hotel in Madrid with a four-night reservation totaling €4,000. The cumulative losses incurred by the hotel due to his actions exceeded €20,000.

The Straits TimesRFI (Radio France Internationale)

The investigation commenced after an online booking website flagged suspicious activity earlier in February. Initially, transactions appeared to be processed correctly; however, the irregularities were uncovered days later when the payment platform transferred the actual amounts to the affected hotel. Spain's National Police confirmed that this cyberattack was specifically designed to manipulate the payment validation system, highlighting the innovative yet illicit nature of the crime.

The Straits Times

Spain's National Police emphasized the uniqueness of this cybercrime, stating, “This cyberattack was specifically designed to alter the payment validation system, and this is the first time we have detected a crime using this method.” This statement underscores the evolving landscape of cybercrime and the challenges law enforcement faces in addressing such sophisticated tactics.

The Straits Times

While the police have praised the investigation's success, some cybersecurity experts have raised concerns about the vulnerabilities in online booking systems. They argue that this incident could prompt a broader discussion on the need for enhanced security measures to protect against similar cyberattacks in the future.

The Straits Times

Following the arrest, authorities are likely to conduct a thorough review of the security protocols employed by hotel booking platforms to prevent future incidents. Additionally, this case may lead to increased scrutiny of payment validation processes across various online services.

The Straits Times

• “This cyberattack was specifically designed to alter the payment validation system, and this is the first time we have detected a crime using this method,” — Spain’s National Police

The Straits Times