Quick answer: share the smallest amount of booking access your companion needs. A person who only needs the pickup time should not receive the same access as the Booker or a registered driver. Use a reservation-scoped link or driver invitation when available, avoid screenshots of full confirmations, and never forward a one-time verification code.
Orcar designed My Booking around this principle: the Booker, Primary Driver, Additional Driver, and a read-only recipient have different jobs, so they should not automatically see or control the same information. Feature availability can vary by reservation and rollout, but the access model offers a practical checklist for any rental.
A booking is not one shareable document
A confirmation often combines several kinds of information: dates, locations, driver names, contact details, price, payment status, protection, pickup instructions, and sometimes vehicle access details. Sending the entire email or a long screenshot may expose more than the recipient needs.
| Person | What they usually need | What they usually do not need |
|---|---|---|
| Trip companion | Dates, general location, public pickup guidance | Payment amounts, driver documents, vehicle secrets |
| Primary Driver | Own registration, eligibility steps, pickup action | Another driver's identity documents |
| Additional Driver | Own registration and permitted booking context | Booker-only cancellation or payment controls |
| Booker | Payment, receipt, cancellation, driver management | No need to redistribute every private field |
The key distinction is information versus authority. Knowing the reservation number, pickup time, or general location does not make someone an authorized driver and should not give them the ability to cancel, change, collect, or return the vehicle.
Match the access method to the task
Before sharing, ask what the recipient must actually do.
- Follow the trip: use a read-only view that shows safe progress and published guidance without driver data, financial amounts, full protection details, vehicle secrets, or self-service actions.
- Complete driver registration: send the driver's own invitation. The recipient should verify access through their own phone or email and complete only their own documents.
- Manage the booking: keep Booker actions in the Booker's authenticated account. Changes, cancellation, receipts, and driver management can affect the contract and price.
- Coordinate logistics only: send a short message with the date, meeting point, and public instructions instead of forwarding the whole confirmation.
In Orcar's My Booking access model, a reservation ID by itself is not authorization. Read-only access starts from an issued link and creates a short-lived reservation-scoped session. Driver access is purpose-limited, while sensitive actions are checked again by the server when used.
Use this seven-step sharing checklist
- Confirm the recipient. Check the phone number, email address, or messaging account before sending.
- Choose the minimum access. Use read-only information for a companion and a driver-specific invitation for someone who will drive.
- Remove unnecessary details. Do not send full payment records, passport images, licenses, insurance documents, or exact vehicle access details in a group chat.
- Keep verification codes private. A one-time code proves control of the invited phone or email. The recipient should enter it directly and never relay it to another person.
- Open unexpected links carefully. CISA lists urgent language, requests for personal or financial information, shortened URLs, and incorrect addresses as common phishing signs [1]. If a message looks unusual, type the rental company's site address yourself or use its saved app instead of tapping the link.
- Confirm the driver separately. Sharing a booking does not add someone to the rental agreement. Check the supplier's process before pickup.
- Stop access when plans change. Revoke a shared link where supported, ask support to replace it, or send an updated invitation only to the new recipient.
Sharing a booking does not add a driver
This is the most important operational boundary. A companion can know the itinerary without being allowed to drive. A person can also be listed as a driver without receiving Booker-only control over payment or cancellation.
Supplier rules differ. As one official example, Enterprise states that additional authorized drivers must meet age and license requirements and generally appear at the rental location [2]. Do not treat that example as a universal policy. Check the exact provider and country rules attached to your reservation.
If you booked for someone else, read what to check when the Booker, payer, and driver differ. If two people may drive, use the additional driver checklist. For the broader post-payment process, see the five checks after booking.
What to share and what to keep private
| Information | Share with companion? | Share with registered driver? |
|---|---|---|
| Rental dates and general pickup location | Usually yes | Yes |
| Public pickup or shuttle instructions | Usually yes | Yes |
| Full payment breakdown and receipt | Usually no | Only if needed and authorized |
| Passport, license, or IDP image | No | Each driver submits their own |
| One-time verification code | No | Recipient enters their own code |
| Plate, key, lockbox, or exact vehicle location | Only when the pickup flow authorizes it | Only for the eligible pickup driver |
The safest default is simple: share logistics broadly, identity and payment narrowly, and vehicle access only at the authorized pickup stage.
Frequently asked questions
Can I send my rental car confirmation to a friend?
Yes, but remove unnecessary personal and financial details. Prefer a read-only or reservation-scoped link if the rental service provides one.
Can someone use my reservation number to pick up the car?
Not by itself. Pickup normally requires an authorized driver, accepted documents, and the provider's handover checks. In Orcar's My Booking model, the reservation ID alone does not grant access.
Should I share the driver's verification code?
No. The invited driver should receive and enter their own one-time code. Forwarding it breaks the link between the recipient and the verified contact method.
Is a shared booking link the same as adding an additional driver?
No. A shared link provides information or a specific workflow. Driver authorization is a separate rental-agreement step.
What if I sent the booking to the wrong person?
Use the service's revoke or replacement option if available, or contact support. Do not assume deleting your message removes a link that was already opened or copied.
Planning a rental? Search Orcar cars with clear booking details, then keep each traveler's access matched to their role.