The European Commission has opened a formal investigation into Booking.com, suspecting the travel giant of failing to protect consumers from fake listings and phishing scams. The probe, announced on 21 October 2026, centers on whether the platform breached the Digital Services Act (DSA), the EU's landmark rulebook for online platforms.
This isn't a sudden move. The Commission's preliminary review, which included risk assessments from Booking.com and its transparency reports, revealed a staggering rise in reported scams. Between 2022 and 2024, the number of scams on the platform jumped by 500 percent, with fraud totaling 4.2 billion euros in 2024. That's a lot of travelers left out of pocket.
Three Specific Concerns
The investigation will look at three main areas. First, whether Booking.com properly identified and assessed the systemic risks of illegal content, such as listings for properties that don't exist or impersonation fraud. Second, whether the platform has effective measures to remove fraudulent and non-compliant listings. Third, whether it's doing enough to address phishing risks, especially around how reservation and guest data is shared with accommodation providers.
The Commission also wants to know if Booking.com's messaging service is a weak link. Scammers often use booking details to send convincing phishing messages, and the EU is concerned that the platform's design might make it too easy for fraudsters to exploit. The Commission will examine whether Booking.com has safeguards to prevent data from being misused for fraudulent payments.
Advertising Transparency Under the Microscope
Another key issue is advertising. Accommodation providers can pay a higher commission to boost their listings in search results. But the Commission argues that users should be able to clearly recognize these 'boosted listings' as ads. Under the DSA, users have the right to know who is behind an ad, who paid for it, and why they're seeing it. Without that, you can't tell if a property appears at the top because it matches your search or because someone paid for that spot.
Henna Virkkunen, the EU's Executive Vice-President for Tech Sovereignty, Security and Democracy, said in a statement: "Europeans should be able to book their holidays without fear of being scammed. The Digital Services Act sets clear responsibilities on platforms to address these risks, and we must ensure that the leading booking platform in Europe takes those responsibilities seriously."
This investigation is a big deal for travelers. Booking.com is the dominant player in Europe, and if the Commission finds it in breach, the company could face fines of up to 6 percent of its global turnover. That's a serious financial hit, and it could force Booking.com to change how it handles listings, data, and ads.
For now, the Commission will carry out an in-depth investigation, and it can also accept commitments from Booking.com to fix the issues. The company has the chance to remedy the problems before any penalties are imposed.
If you're planning a trip, this news is a reminder to stay vigilant. Always double-check listings, especially if a deal seems too good to be true. And be wary of any messages asking for payment outside the platform. For more on how to spot fake listings, check out our piece on Booking.com's fake Downing Street listing.
The investigation also raises broader questions about the power of big booking platforms. With two giants now controlling 85% of Europe's hotel bookings, the stakes for consumer protection are higher than ever. And as Europe's autumn bookings hold firm, travelers need to know their money is safe.
The outcome of this probe could reshape how online travel agencies operate in Europe. For now, the message from Brussels is clear: platforms must take their responsibilities seriously, or face the consequences.
