European Commission investigates Booking over scams

The European Commission has launched an investigation into whether Amsterdam-based travel site Booking.com has breached data protection laws by not cracking down on fake adverts.

The Brussels-based commission will also consider whether the company told site users which adverts had been ranked higher in search results because their owners had paid more, as is required under transparency rules.

In a third branch of the investigation, Booking.com is accused of exposing users to phishing scams by hackers who gained access to the company’s reservation and guest data.

Booking.com could be hit with fines amounting to 6% of its turnover if the commission decides it has breached the rules and refuses to change its policies.
The number of scams reported on the website increased by 500% between 2022 and 2024, with fraud totalling €4.2 billion in 2024 alone.

Henna Virkkunen, European commissioner for tech sovereignty, said: “Europeans should be able to book their holidays without fear of being scammed.”

In a statement, Booking.com said it was “cooperating fully” with the investigation, adding: “security, trust and the protection of personal information are top priorities.”

“We remain committed to working with relevant governments, regulators, law enforcement and industry partners to combat cybercrime and online fraud and protect travellers and partners,” the company said.