The European Commission opened a formal investigation into Booking.com on Wednesday, examining whether the platform is failing to prevent fraud, phishing scams, and fake listings under the Digital Services Act (DSA).

Commission Executive Vice-President Henna Virkkunen said Europeans should be able to book holidays without fear of scams, adding that the DSA imposes clear responsibilities on platforms to address such risks. The probe will assess whether Booking.com has properly identified and mitigated risks tied to fake listings, impersonation fraud, and non-compliant accommodation offers, as well as whether it has sufficiently protected user data from phishing attacks. Investigators will also review how the platform shares reservation and guest data with accommodation providers and whether its messaging system prevents misuse.

A third focus is transparency in advertising. The Commission suspects Booking.com may not be clearly labeling paid listings that appear higher in search results due to advertising fees, potentially violating DSA obligations. According to a Commission spokesperson, 66 percent of all online accommodation bookings in Europe are made via Booking.com, while the company reported a 500-fold increase in fraudulent practices between 2022 and 2024.

Booking.com stated it would cooperate fully with the investigation, emphasizing that “safety, trust, and the protection of personal data are the highest priority at Booking.com.” The company added it remains committed to working with governments, regulators, and law enforcement to combat cybercrime and online fraud.

The investigation marks the first DSA-related probe into Booking.com, which was designated a “very large online platform” in April 2023. If violations are confirmed, the company could face fines of up to 6 percent of its global annual turnover. The Commission will prioritize the case, gathering evidence through additional information requests, interviews, and inspections. The initiation of proceedings does not predetermine the outcome or confirm any legal breach.