European Commission launches investigation into Booking.com over digital safety concerns

On October 21, 2026, the European Commission initiated an official investigation into Booking.com to determine its compliance with the Digital Services Act (DSA). The regulatory action follows a preliminary review of risk assessment reports submitted by the company over the past three years. Authorities are examining three core systemic risks: the proliferation of fraudulent or non-compliant accommodation listings, including non-existent properties; the prevalence of phishing attacks that exploit customer booking data; and a lack of transparency regarding sponsored content in search results.

Commission officials, including Executive Vice President Henna Virkkunen, emphasized that the platform has a legal responsibility to protect consumers from scams and deceptive marketing practices. The probe aims to verify whether Booking.com has effectively identified and mitigated these risks, specifically regarding the removal of fraudulent offers and clear labeling of paid rankings. In response to the announcement, Alessandro Calari, Regional Director for Greece, Italy, and the Mediterranean, confirmed the company's full cooperation, noting that they remain committed to collaborating with the European Commission to ensure the safety of their systems and users. The investigation remains ongoing as authorities continue to scrutinize the platform's operational transparency and security protocols.