Could be a fraudulent booking with a stolen credit card or cracked account.

Leaves too much of a human trail though. But I could think of a few ways around that too. But I’m not your fraud architect ;)