Governance, Risk and Compliance, Government Regulations, Threat Intelligence

European Commission investigates Booking.com over fraud and data security

Data protection, binary code with European Union flag

Reported by The Register. The European Commission has launched a formal investigation into Booking.com to determine if the platform is adequately addressing rising instances of fraud, phishing and smishing under the Digital Services Act.

The probe focuses on three primary areas involving the platform, which serves over 45 million users in the European Union. First, regulators are examining whether the company fails to prevent fraudulent property listings. Second, they are investigating if the site sufficiently counters social engineering and phishing attempts where scammers hijack owner accounts to solicit payments. Finally, the investigation assesses advertising transparency, specifically regarding how boosted listings are distinguished from organic search results. Officials initiated the inquiry following a significant surge in travel scams, with Booking.com reporting a 500% to 900% increase in incidents over 18 months. In the Netherlands alone, fraud reports increased tenfold in early 2026, resulting in 82,000 euros in damages. While the company maintains that it is cooperating with the European Commission and prioritizing user security, regulators argue that current risk assessment measures remain substandard. The commission expects more diligent oversight, including improved verification of property owners and faster removal of malicious listings to protect consumers and business users across all member states.

Source: The Register

You can skip this ad in 5 seconds