The European Commission has opened formal proceedings against Booking.com under the Digital Services Act (DSA), the EU's law governing large online platforms. The investigation, announced on Wednesday, 21 October 2026, will examine whether the Amsterdam-based company does enough to protect users from fraud.
Three areas under investigation
- Fake listings: fraudulent or non-compliant listings, including people pretending to own properties they do not, according to The Register.
- Phishing: scams that misuse reservation and guest data, for example when criminals take over a property owner's account and message guests asking for extra payments.
- Boosted listings: accommodation providers can pay a higher commission to rank higher. The Commission says users must be able to see that these listings are advertising, according to The Irish Times.
A growing problem
A Commission official described Booking.com's defences as "absolutely substandard," The Register reported. In the Netherlands, more than 1,000 fraud reports in early 2026 caused about €82,000 in damage, ten times the previous year. In June 2024, Booking.com acknowledged a 500–900% rise in travel scams over 18 months, as reported by the BBC. Earlier in 2026, the company disclosed a breach in which "unauthorised parties" accessed customer details.
Booking.com, which lists more than 30 million places to stay, said it is "cooperating fully" and that security and trust are "top priorities."
What happens next
The Commission can impose interim measures, issue a decision that Booking.com has broken the rules, or accept commitments from the company. It stressed that opening proceedings "does not prejudge any final outcome." Under the DSA, very large platforms can face substantial fines if found in breach.
How to protect yourself when booking
- Never pay outside the platform, even if a message seems to come from your hotel.
- Be suspicious of urgent requests to "re-confirm" card details by link.
- Check messages inside the official app rather than clicking links in emails or texts.
- If in doubt, contact the property using details from its own website.
