Sighhhh. My wife got an email, misspelled name, garbled address, indicating payment for a small vacation. Thinking the email itself was the scam I was cautious but it looks like the vacation spot is likely legit but the 3rd party booking and reservation fraudulent. As far as we can tell, no charges to us on our cards have occurred. But I'm following up with the booking agents to get further clarity.
Life is complicated when it might be a phishing attempt, might be a scam, might be fraudulent charge, might be identity theft, the originating party might be the baddie or they might be the innocent victim, etc, etc.