EU opens Booking.com fraud investigation

Source

ShortTermRentalz: EU opens Booking.com fraud investigation

What It Says

The European Commission has launched formal proceedings against Booking.com to investigate its compliance with the Digital Services Act (DSA). The probe focuses on how the platform manages and mitigates risks related to fraudulent activities. Specifically, regulators are investigating:

Fraudulent Listings: Fake listings for non-existent properties, non-compliant accommodation offers, and instances where bad actors impersonate legitimate properties.
Phishing and Data Security: Phishing scams targeting guest and reservation data, including how Booking.com shares data with hosts and secures its messaging services.
Search Transparency: Whether the platform clearly discloses when listings pay to boost their search visibility rather than earning placement organically.

Booking.com, which was designated a "very large online platform" under the DSA in April 2023, is cooperating with the investigation.

Why It Matters

As one of the dominant online travel agencies (OTAs) in Europe, Booking.com is a critical revenue driver for short-term rental operators. This investigation directly targets systemic vulnerabilities that impact property managers, such as guest-facing phishing scams and listing hijacking. Furthermore, the scrutiny on paid search placements could force Booking.com to alter how it displays sponsored listings, impacting marketing strategies and visibility costs for professional hosts.

Useful Signals

Regulatory Risk: Under the DSA, Booking.com faces potential fines of up to 6% of its global annual turnover if found in breach.
Security Audits: The investigation covers risk assessments from 2023 through 2026, signaling a deep, multi-year review of the platform's security infrastructure.
Potential Platform Changes: Operators should prepare for tighter security protocols regarding guest messaging, stricter verification processes for new listings, and more explicit labeling of sponsored search results.

STR Tech Report Take

This investigation highlights the growing regulatory pressure on major OTAs to police their marketplaces. For short-term rental operators, a more secure Booking.com is a double-edged sword. While reduced phishing and fewer fraudulent copycat listings will protect guest trust and operator reputations, stricter verification and messaging protocols may introduce operational friction. Technology vendors in the trust-and-safety and guest-communication spaces should watch this closely, as Booking.com may look to integrate third-party solutions or mandate stricter API compliance to satisfy EU regulators.

Original Source