Key takeaway: Regulators are starting to treat fraud and phishing defenses as a legal compliance question under the Digital Services Act. That shifts the stakes from reputation and business risk to legal compliance. Other large marketplaces should expect similar scrutiny.
The European Commission opened a Digital Services Act investigation into Booking.com on October 21, 2026, NL Times reported. The investigation examines whether the platform adequately assesses and mitigates fraud and phishing risks. Those risks are tied to its accommodation listings and reservation system.
The inquiry covers three areas, the outlet reported. First, the Commission is examining whether Booking.com properly identifies and mitigates fake listings, impersonation fraud and non-compliant accommodation offers. Second, it is examining whether Booking.com addresses phishing risks tied to how it shares reservation and guest data with hosts. Third, it is examining whether Booking.com clearly labels paid, boosted listings as advertisements.
A Commission spokesperson told the ANP news wire that Booking.com handles 66% of online accommodation bookings made in Europe. The spokesperson also said reported fraud on the platform rose sharply between 2022 and 2024. [Note: figure pending confirmation — see flag above before publishing a specific percentage.]
European Commissioner Henna Virkkunen addressed the investigation directly. “Europeans should be able to book their holidays without fear of being scammed,” she said, according to NL Times.
Booking.com said it would cooperate fully with the investigation. “Safety, trust, and the protection of personal data are the highest priority at Booking.com,” the company said.
Why it matters: Booking.com’s scale puts the case squarely in front of merchants and payment providers that route transactions through major marketplaces. A DSA finding against the platform could push other large accommodation and eCommerce marketplaces to act early. Those marketplaces may need to tighten fake-listing and phishing controls well ahead of their own regulatory scrutiny.
Source: NL Times