More than 500 people have fallen victim to a booking.com hotel scam