Particle.news

EU Opens DSA Probe Into Booking.com Over Fake Listings and Phishing Risk

Commission investigators will review how Booking.com removes illegal offers, shares reservation data and marks paid placements, with remedies or fines possible under the Digital Services Act.

Overview

  • The European Commission launched a formal Digital Services Act investigation into Booking.com on Wednesday, October 21, 2026, focused on fake accommodation listings, data sharing that could enable phishing, and opaque paid placements.
  • Preliminary checks by Brussels found thousands of allegedly fake listings across the EU and a sharp rise in fraud reports that Booking.com flagged as a 500% global increase with 1,072 reports and €82,000 in damage in the first half of 2026.
  • Investigators will assess whether Booking.com properly removes illegal or misleading offers, how it passes reservation and guest data to accommodation providers, and whether those processes leave users exposed to phishing or other misuse.
  • The probe will also examine whether Booking.com clearly labels paid or highlighted search results so users can tell which listings are promoted and how to change advertising settings.
  • Booking.com, headquartered in Amsterdam, said it will cooperate constructively; the Commission can accept commitments to change practices or ultimately impose fines of up to 6% of the company’s worldwide annual turnover if breaches are found.