Hongi for hotels & hospitality

The guest thinks it’s the front desk. The front desk thinks it’s IT. Both can be wrong.

Hospitality gets attacked from two sides: guests receive fake payment requests “from the hotel”, and staff receive fake support calls. Hongi makes both sides verifiable.

~$100M
quarterly impact MGM Resorts reported after one vished helpdesk call in 2023
The Record · MGM SEC filing
$380M
claimed by Clorox in its lawsuit over helpdesk resets handed to an impersonator
BleepingComputer · Clorox v. Cognizant
3 sec
of audio is enough to clone a voice — including your receptionist’s
industry standard, 2026

Your brand is the phishing kit

After a booking through an online travel agency, your guest gets a message: confirm your card details or lose the reservation. It looks like it comes from the hotel, references a real stay, and arrives at a believable moment. When the charge hits, the guest does not blame the criminal — they blame you, in a review everyone reads.

The staff side is quieter but worse. The MGM incident started with one phone call to a helpdesk by someone pretending to be an employee. Hotels run on shift work, high turnover and outsourced IT: exactly the conditions in which a confident caller gets believed.

Both attacks share one root: in hospitality, nobody on a phone can currently prove who they are.

Three flows, honestly labelled

Guest protection Live today

Guests verify a trusted person before paying

The free app works today: a guest who gets a “confirm your payment” call checks with a paired contact first. You can recommend it in booking confirmations without building anything.

Directory listing Pilot — onboarding now

Your property as a verified organization

Apply, prove control of your domain, pass an editorial review. Guests can pair with the real hotel — and a fake “front desk” has nothing to pair with.

Caller-ID & staff verification In development

“Your hotel is calling — tap to verify”

On-device caller-ID for verified hotel numbers, and colleague-to-colleague verification so a night-shift receptionist can check that “IT” is really IT. Co-designed with pilot properties.

What your guests experience

A guest sees your property’s name on a call and one button to verify it. A fake payment call shows nothing to verify — and the guest’s suspicion lands on the criminal instead of on your brand. The chargeback never happens, and neither does the one-star review that comes with it.

One working session with your ops or security lead.

We map one flow — guest protection, directory, or staff verification — and scope a free 90-day pilot with metrics agreed up front.