EU Regulators Open Investigation Into Booking.com Fraud Protections
European Union regulators have launched an investigation into Booking.com to determine if the platform has sufficiently protected travelers from online scams and fraudulent payment requests. The inquiry focuses on whether the Dutch-based online travel agency, a subsidiary of Booking Holdings, has implemented adequate safeguards to prevent criminal actors from exploiting its messaging systems and property listing services.
According to the European Commission, the investigation follows a review of four years of risk assessments, transparency reports, and responses to official information requests submitted in September 2025 and May 2026. While officials have not yet established a formal breach of law, the proceedings will examine how reservation details are shared with accommodation providers and whether the platform has effectively identified and removed nonexistent properties or impersonators. Henna Virkkunen, the commission’s executive vice president for tech sovereignty, security, and democracy, stated that the Digital Services Act establishes clear responsibilities for platforms to address these risks.
The Regulatory Framework for Digital Platforms
The European Union’s regulatory approach to online travel agencies is governed by the Digital Services Act, which requires major platforms to mitigate systemic risks. This framework mandates that companies provide transparency regarding their content moderation and security measures. For a company like Booking.com, which provides reservation services for approximately 3.4 million properties across more than 220 countries, the scale of operations presents a significant challenge in policing third-party interactions.
The investigation into Booking.com represents a broader effort by EU regulators to ensure that dominant digital intermediaries maintain the integrity of their marketplaces. Officials are currently gathering evidence through interviews, inspections, and further information requests. Depending on the findings, the commission may order interim measures, issue a formal finding of noncompliance, or accept commitments from the company to rectify identified vulnerabilities.
Systemic Fraud and Consumer Vulnerability
The scrutiny of Booking.com comes after several high-profile reports of financial fraud affecting travelers. In April 2024, Lloyds Bank issued a warning regarding scammers who posed as legitimate hotels through the Booking.com mobile application. These actors would contact guests to request additional payments or sensitive financial details, often threatening to cancel the reservation if the funds were not transferred immediately. One customer reported losing 534 pounds after following such instructions, only to discover upon arrival that no hotel existed at the provided address.
Agustín Reyna, director general of the European Consumer Organisation, BEUC, described the current situation as a systemic problem that puts significant financial sums at risk. He noted that fraudsters are reaching millions of Europeans on a daily basis and called for companies to urgently clean up the financial scams circulating on their platforms. The prevalence of such incidents has prompted regulators to prioritize the security of communication channels between travelers and property owners.
Platform Security and Technological Countermeasures
In response to the investigation, a spokesperson for Booking.com stated that the company is cooperating fully with authorities. According to the company, security and the protection of personal information are top priorities. The firm maintains that it employs a variety of technological defenses to intercept fraudulent activity, including mandatory two-factor authentication for partner accounts and systems designed to block malicious links.
The company also utilizes artificial intelligence to identify and intercept potential scams before they impact users. Booking.com reported that its internal systems successfully blocked 14 million fraudulent transaction attempts last year, representing a 22% increase in blocked activity compared to the previous period. Beyond automated tools, the company stated that it works with industry partners to educate both travelers and accommodation providers about the risks of phishing and unauthorized payment requests.
Corporate Context and Market Position
Booking.com was founded in 1996 as Bookings.nl by Geert-Jan Bruinsma and eventually became a central component of Booking Holdings. Over the decades, the company expanded through strategic acquisitions, including the purchase of ActiveHotels.com in 2004. Today, it remains one of the largest online travel agencies in the world, operating in over 40 languages. The company’s parent organization has recently sought to integrate advanced technology into its business model, including a $100 million investment into an artificial intelligence venture named Vayo.
While the company continues to innovate with AI-powered travel tools, the current regulatory focus remains on the fundamental security of its existing infrastructure. Management has noted that combined AI and human capabilities have helped reduce customer service costs per booking. However, as the European Commission moves forward with its investigation, the focus will remain on whether these technological investments are sufficient to meet the legal requirements for consumer protection under the Digital Services Act.
Booking.com’s AI Investments and Their Regulatory Implications
Booking Holdings has been actively investing in artificial intelligence as a means to enhance its services and streamline operations. In October 2026, the company announced the creation of a new AI venture named Vayo, with a planned investment of $100 million. This initiative aims to develop AI-powered tools that can assist travelers in planning their trips more efficiently. According to management, the AI tools are currently in the testing phase, with a focus on improving the customer experience through personalized recommendations and seamless booking processes.
Despite these technological advancements, the European Commission’s investigation into Booking.com highlights the need for continued scrutiny of how these AI systems are implemented and their impact on consumer protection. While the company claims that AI has contributed to a reduction in customer service costs per booking, the effectiveness of these tools in preventing fraud and ensuring secure transactions remains a critical concern for regulators. The commission is particularly interested in whether the AI systems are being used to enhance security measures, such as identifying and blocking fraudulent activity, rather than simply improving operational efficiency. As the investigation progresses, the alignment of Booking.com’s AI initiatives with the Digital Services Act will be a key area of focus for EU authorities.
Sources
- Booking.com
- Booking.com faces EU investigation over scams and hidden ads
- What Is Booking Holdings Building That Investors Should Watch?
Photo: EmDee (CC BY-SA 4.0)
