[alwa]

As far as payments go, I have been surprised, when booking through booking.com (especially in foreign countries) to see my full credit card details printed in plain text on the Booking.com reservation email that the proprietor printed out and referred to when I checked in. This even when I indicate in the reservation that I intend to pay in cash or with contactless on-site.

While it makes sense to take a card to guarantee against a no-show, it’s always felt a little slimy to me that they make it feel like they, rather than a random property someplace far-flung, are the ones who would collect the fee if I didn’t make good on the reservation—and only if I actually didn’t show up.

It looks like they still pre-emptively give out your full credit card details directly to every property in plaintext, but that they might now make a notional effort to record when the property accesses the CVC?

https://partner.booking.com/en-us/help/policies-payments/gue...

[orra]

That sounds shockingly non-PCI compliant.

[ztetranz]

At least it says:

"Never take a screenshot of your guest’s credit card details, and never write them down."

That's a bit like instructions for an eBike.

"This bike is limited to 20 MPH. Do not go to the third option on the settings menu and remove this limitation with a long press of the plus button".