I tend to find the story believable. I just replace "Expedia" with "Apple" or "Google" and hotel with "app" or "adwords account."

The screenshots of email is a feature of tech industry rants - an industry which tends to take email as more self verifying than the general populace.