Booking Holdings—European Commission opened formal DSA investigation into Booking.com over fraudulent listings, phishing risk, and undisclosed ad rankings
The European Commission opened formal proceedings against Booking.com under the Digital Services Act on October 21, 2026, alleging the platform failed to diligently assess and mitigate systemic risks from fraudulent property listings and phishing scams that exploit its reservation and guest-messaging data, and failed to clearly label 'boosted' paid search listings as advertisements as required by DSA Article 26(1). A Commission official described Booking.com's approach as 'absolutely substandard.' The investigation follows a multi-year preliminary review of Booking.com's risk assessments and is being conducted in cooperation with the Dutch Authority for Consumers and Markets.
Scoring Impact
| Topic | Direction | Relevance | Contribution |
|---|---|---|---|
| Consumer Protection | -against | primary | -1.00 |
| Corporate Transparency | -against | contextual | -0.20 |
| Data Security | -against | secondary | -0.50 |
| Overall incident score = | -0.251 | ||
Score = avg(topic contributions) × significance (high ×1.5) × confidence (0.59)× agency (negligent ×0.5)
Evidence (1 signal)
European Commission announced formal DSA investigation into Booking.com over scams and fraud
The European Commission announced it opened formal proceedings against Booking.com under the Digital Services Act, citing failures in risk mitigation for fraudulent listings and phishing, and non-compliant ad labeling for boosted listings.