The EU Commission launches a DSA probe into Booking Holdings' Booking.com to determine whether it is doing enough to combat fraudulent listings and phishing (Foo Yun Chee/Reuters)

The European Commission is examining Booking.com’s systems for dealing with fraudulent listings and phishing. In simple terms, regulators want to know whether the website takes sufficient steps to prevent deceptive offers and messages from reaching people who use it to reserve accommodation. The source does not state that Booking.com has broken the law or that regulators have reached a conclusion.

A fraudulent listing could falsely advertise a room, property, price, or availability. Phishing could use a fake message or booking-related page to trick a traveler into revealing payment details or account information. The investigation will therefore examine how Booking.com detects, removes, and responds to these risks. The source does not identify a specific listing or phishing campaign.

The probe is being conducted under the European Union’s Digital Services Act, or DSA. Its outcome is not stated. The investigation could clarify what regulators expect from a major accommodation platform when users and property owners interact through its service.

The Digital Services Act is an EU framework governing how online services manage illegal content, user safety, transparency, and platform risks. It matters here because the Commission is using the law to examine whether Booking.com adequately addresses fraudulent listings and phishing. The source names the DSA but does not provide the full legal details of the investigation.

Booking.com is more than a private webpage displaying its own hotels. It functions as an online marketplace where travelers encounter accommodation offers from property owners or businesses. That connection creates risks: a false offer can mislead a customer, while a fake message can imitate a trusted booking interaction. DSA duties can require platforms to create processes for reporting, reviewing, and responding to such problems.

The exact obligations depend on the service’s legal category and the Commission’s findings. Established DSA rules can include transparency duties, risk controls, and cooperation with regulators. The source does not say which specific DSA provisions Booking.com may have breached, or whether it has been formally found responsible.

Fraudulent listings are accommodation offers that misrepresent important facts, such as whether a property exists, who controls it, or what a traveler will receive. Phishing is a deception aimed at collecting sensitive information, often through a message or webpage that impersonates a trusted company or booking contact. The source identifies both threats but gives no specific examples.

A scammer might present an attractive room that is unavailable, nonexistent, or controlled by someone without permission to rent it. A related phishing attempt could send a traveler to a lookalike payment page or ask for account details. The key mechanism is impersonation: familiar branding and realistic booking information can lower suspicion and prompt a person to pay or disclose information.

Platforms can reduce these risks by checking listings, monitoring messages, enabling reports, and acting quickly when warnings appear. Those measures do not guarantee that every scam disappears. The Commission’s investigation will examine whether Booking.com is doing enough, but the source gives no findings about particular victims, listings, or messages.

The supplied source does not state how many users Booking.com has, how many accommodation listings it carries, or how many bookings it handles. It also provides no figures for competing travel platforms. Therefore, the article cannot support a numerical comparison of Booking.com’s scale with rivals. The most that can be established is that it is described as an online hotel reservation website.

That missing scale matters because a platform’s reach can affect the potential impact of fraudulent listings and phishing. More users and bookings could expose more people to a scam, while more listings could make monitoring harder. Those are general platform considerations, not figures or findings reported in the source. No specific market ranking is given.

The Commission’s investigation concerns whether Booking.com is doing enough to combat fraud, not how large it is. To answer the scale question precisely, readers would need current company disclosures or independent industry data. The source itself supplies none, so a reliable comparison cannot be made from this article alone.

Booking.com’s central responsibility is to operate systems that identify, prevent, remove, and report fraudulent listings or phishing activity. It should give users ways to flag problems and respond to credible warnings. Property owners should provide accurate accommodation details and use legitimate communication and payment channels. The source specifically focuses on Booking.com’s efforts, not on findings about owners or travelers.

Travelers also have a practical role. They can check offer details, treat unexpected payment requests cautiously, and report suspicious activity through the platform. These steps can reduce exposure, but they cannot replace platform controls. Property owners can help by protecting their accounts and ensuring their listings remain truthful. These safeguards create information for Booking.com to review.

The European Commission’s role is oversight. It investigates whether the platform meets its Digital Services Act obligations and can take action under EU law if necessary. The supplied article only says that regulators launched the probe. It does not describe specific duties imposed on each group or report any proven failure by Booking.com.

If the European Commission finds that Booking.com breached applicable DSA duties, EU enforcement can include orders requiring the platform to correct its practices. For serious or continuing noncompliance, the DSA allows fines of up to 6% of a provider’s worldwide annual turnover. Regulators can also use periodic penalty payments to encourage compliance. These are established DSA powers, not penalties announced in the source.

The Commission’s response would depend on the investigation’s findings, the seriousness of any breach, and whether Booking.com cooperates or fixes problems. Possible measures can include requiring better risk controls, clearer reporting procedures, or stronger responses to fraudulent content. The source does not describe a specific alleged violation, proposed remedy, or financial amount.

The current reality is that the probe has only been launched, according to the supplied text. No decision, fine, corrective order, or deadline is reported. Readers should therefore distinguish between available legal powers and actual enforcement. The article establishes scrutiny, not a final judgment or penalty against Booking.com.

Online marketplaces bring together people who may never meet in person. A traveler usually cannot inspect a property owner’s identity, property, or promises directly before booking. Verification systems help reduce that uncertainty by checking information, identifying unusual behavior, and connecting listings to accountable sellers. They support trust, although they cannot eliminate every scam.

For example, a platform might compare a seller’s identity details with account information, review a new property’s images and address, and monitor messages for suspicious payment requests. A reporting tool can then send a questionable listing to human or automated review. These mechanisms create a trail of signals that helps distinguish ordinary activity from deception. The source does not describe Booking.com’s specific verification tools.

The European Commission’s investigation shows why such systems matter to regulators. It is asking whether Booking.com is doing enough to combat fraudulent listings and phishing. The source gives no conclusion about the platform’s controls. More broadly, effective verification can protect travelers, discourage dishonest sellers, and make marketplace participation safer for legitimate property owners.