Travellers are getting seemingly convincing messages asking them to provide bank card details and threatening their reservation will be cancelled