EU opens DSA probe into Booking.com over scam and phishing risks
Original title: EU Regulators to Investigate Booking.com Over Scam Risks
Formal proceedings could lead to a fine of up to 6% of Booking.com's global annual turnover if the firm is found non-compliant.
The European Commission opened formal proceedings against Booking.com on October 21 over possible Digital Services Act breaches tied to fraudulent listings and phishing. Investigators will examine guest-data sharing with accommodation providers, anti-misuse safeguards, the messaging service, illegal content such as impersonation fraud, and advertising transparency. A non-compliance finding could bring a fine of up to 6% of global annual turnover plus corrective measures. The Commission said the case does not prejudge the outcome and it may accept commitments.
Unconfirmed: The Commission said opening proceedings does not prejudge whether Booking.com breached the DSA.
- Proceedings follow a preliminary investigation by the Commission.
- The DSA has applied to very large online platforms since November 2022.
- Past reports cited Vidar, a March 2025 ClickFix campaign, and June 2026 Japan hotel phishing.
- Henna Virkkunen said Europeans should book holidays without fear of being scammed.
- Products
- Booking.com
- Malware
- Vidar
- Organizations
- European Commission
From the original article
2 min read at infosecurity-magazine.com
The EU Commission will assess whether Booking. com has adequately protected customers from phishing attacks
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.