{"id":71723,"date":"2026-10-25T17:16:43","date_gmt":"2026-10-25T15:16:43","guid":{"rendered":"https:\/\/www.lhr-law.de\/?p=71723"},"modified":"2026-10-29T22:40:35","modified_gmt":"2026-10-29T20:40:35","slug":"booking-com-dsa-proceedings-fake-listings","status":"publish","type":"post","link":"https:\/\/www.lhr-law.de\/en\/magazine-en\/data-protection-law\/booking-com-dsa-proceedings-fake-listings\/","title":{"rendered":"EU proceedings against Booking.com: fake listings, phishing and paid ranking"},"content":{"rendered":"
The European Commission wants to establish whether Booking.com has adequately assessed and mitigated the risks of fraud on its platform. A second question is whether users can recognise that certain properties appear prominently only because the provider pays for it. Booking.com has been designated a very large online platform (VLOP) since 25 April 2023 and is therefore subject to the strictest obligations of the Digital Services Act (DSA, Regulation (EU) 2022\/2065<\/a>).<\/p>\n The key points:<\/p>\n The Commission suspects that Booking.com has not diligently identified and effectively mitigated systemic risks of fraud. This is set out in the Commission\u2019s announcement of 21 October 2026<\/a>, which names three areas of investigation.<\/p>\n The first concerns fraudulent and non-compliant listings, such as accommodation that does not exist and cases of identity fraud in which third parties pose as hosts. The Commission wants to know whether Booking.com identified these risks and whether its countermeasures, such as removing such listings, actually work.<\/p>\n The second is phishing. Booking.com passes reservation and guest data to accommodation providers and runs its own messaging system between guest and host. The Commission is examining whether the platform does enough to prevent this data and this channel from being misused for phishing messages and fraudulent payment requests.<\/p>\n The third concerns paid visibility. Accommodation providers can improve their position in search results by paying a higher commission. The Commission is examining whether users can see that this is advertising, on whose behalf it is shown, who paid for it, why it is shown to them and how they can change their settings.<\/p>\n The proceedings follow a preliminary investigation. The Commission analysed Booking.com\u2019s risk assessment reports for 2026 and the three previous years, its transparency reports and its replies to formal requests for information of 23 September 2025 and 26 May 2026. Executive Vice-President Henna Virkkunen said: \u201cEuropeans should be able to book their holidays without fear of being scammed.\u201d<\/p>\n At its core, the case is about the duties of risk assessment and risk mitigation that apply only to very large platforms and search engines. Under Art. 34 DSA<\/a>, they must identify, analyse and assess the systemic risks of their service at least once a year. This expressly includes the dissemination of illegal content, which covers fraudulent listings. Art. 35 DSA<\/a> requires them to mitigate those risks with reasonable, proportionate and effective measures, for instance by adapting the design of the service, content moderation or recommender systems.<\/p>\n The test is therefore not whether individual fake listings slip through. No platform can prevent that entirely. What matters is whether the provider captures the risk systematically and has aligned its processes accordingly. For a booking platform, this includes vetting new hosts, responding to notices and securing the communication channels through which payment details could be requested.<\/p>\n The obligation under Art. 26(1) DSA<\/a>, by contrast, applies to all online platforms, not only the very large ones. Under Art. 19 DSA<\/a>, only micro and small enterprises are exempt. Every advertisement must be identifiable as such to the user in a clear, concise, unambiguous manner and in real time. Users must also be able to see on whose behalf it is presented, who paid for it and the main parameters used to select them as recipient, including how to change those parameters.<\/p>\n Paying for a higher position is advertising, even if the listing looks like an ordinary search result. Users generally assume that the order of a results list says something about price, rating or relevance. An undisclosed paid placement distorts that expectation.<\/p>\n This is not just a DSA issue. German unfair competition law expressly prohibits, in No. 11a of the Annex to Section 3(3) of the German Act against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb, UWG)<\/a>, displaying search results without clearly disclosing paid advertising or specific payments for a higher ranking. Section 5b(2) UWG<\/a> also requires information on the main ranking parameters. In the relationship with business users of the platform, Art. 5 of the P2B Regulation (EU) 2019\/1150<\/a> requires the platform to describe in its terms whether and how ranking can be influenced against remuneration.<\/p>\n For Booking.com the topic is not new. Courts and authorities have previously dealt with how freely hotels may set their prices and how the platform presents its listings. What is new is that the Commission is now acting directly against the platform with its DSA enforcement powers.<\/p>\n The Commission will now carry out an in-depth investigation as a matter of priority and gather further evidence, for example through additional requests for information, interviews or inspections. It has not set a deadline. Several outcomes are possible:<\/p>\n The Commission stresses that opening proceedings does not prejudge the outcome. It is cooperating with the Netherlands Authority for Consumers and Markets (ACM), the Digital Services Coordinator responsible for Booking.com because the company is established in the Netherlands. For the conduct examined under Art. 26(1) DSA<\/a>, national authorities lose their supervisory powers once proceedings are opened. This follows from Art. 66(2) DSA<\/a>. Civil claims by competitors, associations or consumers before German courts remain unaffected.<\/p>\n Hosts should expect Booking.com to tighten its checks and requirements. Platforms often respond to Commission proceedings with stricter identity checks, additional mandatory information and faster suspensions. That protects against fraudsters, but can also hit legitimate providers whose documents are incomplete or whose account looks unusual.<\/p>\n Practical recommendations:<\/p>\n For travellers, nothing changes for now; the basic rules remain the same. Pay only through the channels provided by the platform and never to a third-party account on request by message, messenger or link. Legitimate hosts do not ask you to re-enter card details via a link they send you.<\/p>\n You can report suspicious listings through the platform\u2019s notice mechanism under Art. 16 DSA<\/a>. The platform must process the notice and inform you of its decision. If it does not respond adequately, you can lodge a complaint under Art. 53 DSA<\/a> with the Digital Services Coordinator of your Member State, in Germany the Federal Network Agency (Bundesnetzagentur). If money has already been paid, contact your bank or card issuer immediately and report the matter to the police.<\/p>\n The case shows where supervisors are looking: at fraud by providers and at hidden advertising in rankings. Both affect every marketplace on which third parties sell or rent. The Commission is also conducting DSA proceedings against marketplaces such as Temu and AliExpress. Smaller platforms that are not designated as VLOPs must also comply with Art. 26 DSA<\/a> as soon as they are no longer micro or small enterprises. German unfair competition law applies regardless of size.<\/p>\n Platform operators should therefore check whether paid placements, \u201ctop offers\u201d or featured partners are clearly labelled as advertising in every view, including in the app and in filtered result lists. Sellers and landlords who book such programmes should be aware that, although they are rarely the addressees of DSA obligations themselves, their listings may suddenly appear differently if the platform changes its approach. For more on when a platform counts as \u201cvery large\u201d, see our article on the General Court\u2019s Stripchat judgment (in German)<\/a>.<\/p>\n Account suspended, listing removed or your platform under regulatory scrutiny?<\/p>\n We represent hosts, sellers and platform operators in account suspensions, DSA compliance and ad labelling issues. You will usually receive an initial assessment within 24 hours.<\/p>\n Contact us now<\/a><\/p>\n<\/div>\n The European Commission has opened formal proceedings against Booking.com under the Digital Services Act over fake listings, phishing via guest data and paid ranking without ad labelling. What this means for hosts, travellers and other platforms.<\/p>\n","protected":false},"author":2,"featured_media":71737,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_focuskw":"Booking.com DSA","_yoast_wpseo_title":"Booking.com: EU proceedings under the DSA %%sep%% %%sitename%%","_yoast_wpseo_metadesc":"The EU Commission is investigating Booking.com over fake listings, phishing and paid ranking. What it means for hosts, travellers and platforms.","show_overview":"1","footnotes":""},"categories":[19451,19455],"tags":[20292,21418,21419,21422,21425,21504,21505,21506,21507],"topic_category":[19442,19460],"class_list":["post-71723","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-protection-law","category-competition-law-antitrust-law","tag-advertising-en","tag-digital-services-act-en","tag-very-large-online-platform","tag-european-commission","tag-platform-regulation","tag-booking-com-en","tag-phishing-en","tag-ad-labelling","tag-fake-listings","topic_category-competition-law-antitrust-law","topic_category-data-protection-law"],"acf":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.lhr-law.de\/en\/wp-json\/wp\/v2\/posts\/71723","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lhr-law.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.lhr-law.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.lhr-law.de\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lhr-law.de\/en\/wp-json\/wp\/v2\/comments?post=71723"}],"version-history":[{"count":3,"href":"https:\/\/www.lhr-law.de\/en\/wp-json\/wp\/v2\/posts\/71723\/revisions"}],"predecessor-version":[{"id":71912,"href":"https:\/\/www.lhr-law.de\/en\/wp-json\/wp\/v2\/posts\/71723\/revisions\/71912"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.lhr-law.de\/en\/wp-json\/wp\/v2\/media\/71737"}],"wp:attachment":[{"href":"https:\/\/www.lhr-law.de\/en\/wp-json\/wp\/v2\/media?parent=71723"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.lhr-law.de\/en\/wp-json\/wp\/v2\/categories?post=71723"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.lhr-law.de\/en\/wp-json\/wp\/v2\/tags?post=71723"},{"taxonomy":"topic_category","embeddable":true,"href":"https:\/\/www.lhr-law.de\/en\/wp-json\/wp\/v2\/topic_category?post=71723"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Non-existent holiday flats, fraudulent payment requests and properties that rank higher in exchange for commission: on 21 October 2026 the European Commission opened formal proceedings against Booking.com under the Digital Services Act. Hosts, travellers and other platforms should take a close look, because the standard applied reaches far beyond the travel industry.<\/em><\/p>\n\n
What does the European Commission allege against Booking.com?<\/h2>\n
Which DSA obligations are at the centre of the case?<\/h2>\n
Why is paid ranking without labelling a problem?<\/h2>\n
What happens next in the proceedings?<\/h2>\n
\n
What does this mean for hosts and hotels?<\/h2>\n
\n
What does this mean for travellers?<\/h2>\n
What does this mean for other platforms?<\/h2>\n
Frequently asked questions about the DSA proceedings against Booking.com<\/h2>\n
Has Booking.com infringed the DSA?+<\/span><\/summary>\n
What penalty does Booking.com face?+<\/span><\/summary>\n
Must paid ranking on platforms be labelled?+<\/span><\/summary>\n
What should I do if I was scammed via a booking platform?+<\/span><\/summary>\n
What can hosts do if their account is suspended?+<\/span><\/summary>\n
Further information<\/h2>\n
\n