European Commission investigates Booking.com under Digital Services Act

The European Commission has opened formal proceedings against Booking.com, marking its first case against the platform under the Digital Services Act (DSA). The investigation focuses on three primary areas: fraudulent listings, phishing scams involving guest and reservation data, and the lack of clear labeling for paid advertisements.

Commission officials have criticized the platform's current efforts to combat scams as “absolutely substandard,” suggesting that Booking.com’s internal risk assessments were insufficient. The probe will examine how the company manages fraudulent listings, such as non-existent accommodations, and whether it adequately mitigates systemic risks. Additionally, investigators are looking into how reservation data is shared with accommodation providers to prevent phishing attacks where criminals impersonate properties to solicit extra payments from guests.

If found in violation of the DSA, Booking.com could face fines of up to 6% of its annual global turnover. In response, Booking.com stated it is cooperating fully with the Commission and maintains that security, trust, and the protection of personal information are top priorities.