Melike Pala
21 October 2026•Update: 21 October 2026
The European Commission on Wednesday opened formal proceedings against Booking.com to investigate whether the online travel platform breached the European Union's Digital Services Act (DSA) by failing to adequately address fraudulent listings, phishing scams and advertising transparency.
The investigation will assess whether Booking.com properly identified and mitigated risks associated with fake accommodation listings, including non-existent properties, impersonation fraud and non-compliant offers, according to a statement.
The EU executive will also examine whether the platform took sufficient measures to prevent fraudulent listings from appearing on its service and protect consumers from potential scams.
A second focus of the investigation will be phishing attacks targeting Booking.com users through reservation and guest data.
The bloc will assess whether the platform adequately evaluated risks arising from the sharing of reservation information with accommodation providers, and the design and operation of its messaging service.
It will also examine whether sufficient safeguards are in place to prevent personal data from being misused to send phishing messages and solicit fraudulent payments.
The commission said it would conduct an in-depth investigation as a matter of priority, gathering further evidence through requests for information, interviews and inspections.
It may also impose interim measures, adopt non-compliance decisions or accept commitments from Booking.com to address the concerns under investigation.
