EU Commission Opens DSA Probe Into Booking.com Over Fraud and Phishing Risks
European regulators launch a Digital Services Act investigation to assess whether the hotel booking platform provides sufficient protection against scams.
Key points
- The European Commission has initiated a formal probe under the Digital Services Act targeting Booking Holdings’ Booking.com.
- Investigators will examine the platform’s measures against fraudulent listings and phishing attempts aimed at users.
- This action follows earlier reporting that EU authorities were scrutinizing the site’s fraud defenses and data protection standards.
The European Commission has launched a formal investigation into Booking.com under the Digital Services Act, according to Foo Yun Chee of Reuters. The probe focuses on determining whether the online hotel reservation platform is taking adequate steps to combat fraudulent listings and phishing schemes that target its users.
Regulators will assess the effectiveness of Booking Holdings’ current safeguards against scams, as the agency seeks to verify compliance with EU digital service laws. The investigation aims to evaluate how well the platform identifies and removes deceptive content that could harm consumers or compromise their personal information during the booking process.
Context and Background
This regulatory action aligns with previous scrutiny of Booking.com’s security practices, as Threat Times reported on October 21, 2026. At that time, the European Commission launched a Digital Services Act investigation into Booking.com’s fraud defenses, citing substandard protection against scams and data risks. The earlier report highlighted these specific vulnerabilities as the basis for the initial regulatory interest.
The current probe continues this line of inquiry, with EU tech regulators specifically tasked with investigating the adequacy of the site’s defenses. By launching this formal DSA probe, the Commission is moving to determine if the platform is doing enough to weed out fraudulent listings and phishing attempts.
Who Is Affected
Booking Holdings, the parent company of Booking.com, is the direct subject of this investigation. The platform itself faces potential regulatory consequences if the probe determines that its safeguards are insufficient to meet DSA requirements. Users of the service may also be indirectly affected, as the outcome could influence how the site manages risk and displays listings in the future.
Consumers relying on the platform for travel bookings remain the primary focus of the regulatory concern. The probe seeks to ensure that individuals are not exposed to fraudulent actors who use fake listings or phishing tactics to steal money or personal data through the booking interface.
What should you do?
The investigation is ongoing, and no final rulings or penalties have been announced yet. Stakeholders should monitor official communications from the European Commission for updates on the probe’s findings. The source material does not provide information on any statements or remediation steps released by Booking Holdings.
What to do and how to stay safe: Booking.com
- Monitor official EU Commission channels for updates on the investigation’s scope and any subsequent regulatory decisions.
- Review travel booking confirmation emails carefully for signs of phishing, such as mismatched sender addresses or urgent language.
- Verify hotel details independently by cross-referencing listing information with other trusted travel platforms or direct hotel contacts.
- Avoid clicking on links in unsolicited messages claiming to be from Booking.com; instead, navigate directly to the official website.
Step-by-step guide: How to Remove Data from Data Brokers: The Manual Cleanup Process
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is the European Commission investigating regarding Booking.com?
The Commission is investigating whether Booking.com is doing enough to combat fraudulent listings and phishing under the Digital Services Act.
Who is conducting this probe?
The European Commission, specifically EU tech regulators, is conducting the investigation into the online hotel reservation website.
Has Booking.com been penalized yet?
No, the source material only states that a probe has been launched to determine if the platform is doing enough; no penalties are mentioned.
