Following instructions she thought came from Booking.com, a woman wired payment for her planned eight-day stay to a bank account in Bilbao, Spain. It was a scam. She blames the company, but does she also bear some responsibility?