For years holidaymakers have been losing cash through a scam that targets customers who have made bookings on Booking.com.