A 20-year-old Spanish hacker was arrested Wednesday after allegedly exploiting a vulnerability in online payment systems to stay in luxury hotels for as little as one euro cent per night, Spanish police announced.
The individual, whose name has not been released, allegedly modified the transaction validation process when making reservations through a prominent international online payment platform. This allowed the system to authorize payments for significantly reduced amounts, according to a statement from the Spanish National Police.
The scheme came to light when the hacker was apprehended while staying at a high-end hotel in Madrid, having booked a four-night stay valued at 4,000 euros but paid a fraction of the cost. Authorities believe the suspect had repeatedly used the method, causing an estimated economic loss of over 20,000 euros to the hotels.
“The cybercriminal” selected the online payment option and then altered the transaction validation process, enabling the system to approve the booking after entering only one cent, police detailed in a press release. This method of operation, authorities stated, had not been previously detected.
Beyond the reduced room rates, the hacker as well allegedly consumed items from hotel minibars without paying, further contributing to the financial damage. The investigation is ongoing and authorities are working to determine the full extent of the fraudulent activity and whether other hotels may have been affected.
The case highlights potential vulnerabilities in online payment security within the hospitality industry. Police have not released details about the specific platform exploited, citing the ongoing investigation.
