Which? has uncovered how scammers have been able to set up a fake listing on Booking.com with the address registered at a Wetherspoons in London.