Key Takeaways
- The European Commission opened formal proceedings against Booking.com on 21 October 2026 under the Digital Services Act.
- The investigation focuses on whether the platform failed to effectively assess and mitigate risks related to phishing scams and fraudulent listings.
- The move highlights the EU's strict enforcement of consumer protection rules across the single market.
According to a European Commission press release published on 21 October 2026, the EU executive has initiated formal proceedings to evaluate potential breaches of the Digital Services Act (DSA) by Booking.com. The investigation specifically targets the platform's obligations to diligently assess and mitigate systemic risks related to fraudulent listings and phishing scams. Authorities are concerned that inadequate verification and security measures may expose European consumers to significant financial and data security risks when booking accommodations online. This regulatory action forms part of a broader European Union crackdown on large online platforms and marketplaces to ensure rigorous enforcement of the DSA. Under the single market framework, very large digital platforms operating within the bloc are held to stringent standards regarding consumer protection, illegal content removal, and transparent risk management. By scrutinising major travel intermediaries like Booking.com, Brussels aims to close regulatory loopholes that bad actors exploit, thereby reinforcing trust in cross-border digital commerce and safeguarding the integrity of Europe's digital ecosystem. For citizens and businesses, the investigation underscores the EU's unwavering commitment to holding digital giants accountable for user safety, potentially leading to mandatory platform overhauls or substantial financial penalties if breaches are confirmed. The Commission will now conduct an in-depth investigation as a matter of priority, though no definitive timeline for the final decision has been formally announced yet.
Source: European Commission. Read the original report ↗
Frequently Asked Questions
What is the primary focus of the European Commission's investigation into Booking.com?
The investigation assesses whether Booking.com has breached the Digital Services Act by failing to diligently assess and mitigate risks related to fraudulent listings and phishing scams.
What regulatory framework is being used in this proceeding?
The proceedings are being conducted under the Digital Services Act (DSA), which sets strict accountability and risk-management standards for online platforms operating in the European Union.