Bloc also assesses safeguards against personal data misuse for phishing, payment fraud

BRUSSELS

The European Commission on Wednesday opened formal proceedings against Booking.com to investigate whether the online travel platform breached the European Union's Digital Services Act (DSA) by failing to adequately address fraudulent listings, phishing scams and advertising transparency.

The investigation will assess whether Booking.com properly identified and mitigated risks associated with fake accommodation listings, including non-existent properties, impersonation fraud and non-compliant offers, according to a statement.

The EU executive will also examine whether the platform took sufficient measures to prevent fraudulent listings from appearing on its service and protect consumers from potential scams.

A second focus of the investigation will be phishing attacks targeting Booking.com users through reservation and guest data.

The bloc will assess whether the platform adequately evaluated risks arising from the sharing of reservation information with accommodation providers, and the design and operation of its messaging service.

It will also examine whether sufficient safeguards are in place to prevent personal data from being misused to send phishing messages and solicit fraudulent payments.

The commission said it would conduct an in-depth investigation as a matter of priority, gathering further evidence through requests for information, interviews and inspections.

It may also impose interim measures, adopt non-compliance decisions or accept commitments from Booking.com to address the concerns under investigation.

Related articles:

• Booking.com’s parent company is officially a gatekeeper, EU monopoly watchdog says

• Commission designates Booking as a gatekeeper and opens a market investigation into X