Phoenix 24
Brussels questions whether Europe’s leading booking platform adequately protects travelers.
BRUSSELS
The European Commission has opened a formal investigation into Booking.com over concerns that the online travel platform may be failing to prevent fraudulent accommodation listings, phishing attacks and misleading advertising. Announced on October 21, the proceedings represent a significant test of the European Union’s Digital Services Act and its requirements for protecting consumers across large digital marketplaces.
The investigation examines whether Booking.com has adequately identified and reduced risks associated with nonexistent properties, accommodation offers that fail to meet applicable requirements and criminals impersonating legitimate hosts.
European regulators are particularly concerned about scams involving reservation and guest information. Fraudsters may exploit such details to contact travelers with convincing messages requesting payments, banking credentials or other sensitive information.
Because these messages can refer to genuine bookings, victims may have difficulty distinguishing fraudulent requests from legitimate communications.
The Commission is also investigating advertising transparency. Some accommodation providers pay for higher placement in Booking.com’s search results, and regulators want to determine whether those promoted listings have been clearly identified as advertisements.
This distinction matters because travelers may interpret search rankings as independent assessments of relevance or quality without recognizing the commercial arrangements influencing visibility.
The proceedings follow a preliminary assessment of Booking.com’s risk reports, transparency disclosures and responses to regulatory information requests. The Commission examined materials covering several years before deciding to launch a formal investigation.
Under the Digital Services Act, designated very large online platforms must assess systemic risks and introduce appropriate measures to mitigate them. These responsibilities extend beyond responding to individual complaints after fraud has occurred.
Booking.com was designated a very large online platform in April 2023, bringing it under enhanced European oversight.
If regulators ultimately establish violations, the company could face financial penalties of up to 6% of its worldwide annual turnover. That figure represents the maximum potential regulatory fine, not a penalty already imposed.
Booking.com has stated that it is cooperating fully with the investigation and remains committed to protecting travelers and accommodation partners against online fraud.
The company also emphasized its cooperation with regulators, law-enforcement agencies and industry participants in combating cybercrime.
Opening proceedings does not establish wrongdoing. The Commission must assess the evidence, and Booking.com can propose corrective commitments addressing the identified concerns.
There is no fixed legal deadline for completing the investigation.
The case highlights a growing challenge for digital travel services. Platforms connect millions of travelers with accommodation providers, but that scale also creates opportunities for criminals to exploit trust, account access and booking information.
For consumers, a familiar brand and a genuine reservation do not necessarily guarantee that every subsequent payment request is legitimate.
The investigation may therefore have implications extending beyond Booking.com, particularly for platforms that combine marketplace transactions, customer communications and paid search visibility.
European regulators must determine whether the company’s existing safeguards satisfy legal requirements without treating allegations as established violations.
The broader question concerns accountability within digital marketplaces: when a platform facilitates transactions between strangers, how effectively must it anticipate and reduce foreseeable fraud?
The Commission’s findings could help clarify that responsibility as Europe’s digital economy becomes increasingly dependent on intermediaries connecting consumers with essential services.
Beyond the Headlines, Accountability Matters.