The hotel staffer who calls you with an urgent request for payment isn’t necessarily who they say they are.