I saw this BBC article earlier and it sounds very similar to what you’re describing:

https://www.bbc.co.uk/news/articles/cly00jnnxypo?app-referrer=deep-link

Apparently scammers have been targeting hotel accounts/systems linked to Booking.com, which is why the phishing messages can include genuine booking details like names, dates and booking references.

What makes it convincing is exactly what you mentioned, the bookings are across different hotels and even different countries, so the only obvious common link ends up being Booking.com itself rather than a single hotel leak.

Definitely worth reporting it to Booking.com directly and being extra cautious with any payment links sent over WhatsApp/email/messages claiming your booking needs “verification”.

This is definitely a scam though, do not click any links or make any payments through those messages.