Brussels Investigates Booking.com for Fraud Prevention Failures

www.rtve.es

Brussels Investigates Booking.com for Fraud Prevention Failures

First seen 22 Oct 2026, 21:44 UTC •41.0

Article Content

1 / 3

Browse articles

ThreatCluster •October 22, 2026 at 23:13 UTC

•The European Commission is investigating Booking.com for inadequate fraud prevention measures.
•Recent fraud incidents in Madrid involved users booking non-existent accommodations.
•Booking.com may have violated the EU's Digital Services Act regarding consumer protection.

The European Commission has launched an investigation into Booking.com to assess its effectiveness in combating fraudulent listings and protecting user data. This follows reports of numerous fraud cases in Madrid where users booked non-existent accommodations. The investigation will evaluate whether Booking.com has adequately implemented measures to prevent such scams, as mandated by the EU's Digital Services Act (DSA). Additionally, the Commission will examine the platform's transparency regarding paid listings in search results. Booking.com, which accounts for 66% of hotel bookings in the EU, has stated it is cooperating with the inquiry. The investigation aims to ensure consumer protection and compliance with EU regulations.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2026-10-21

Investigation launched by the European Commission

The Commission opened a formal inquiry into Booking.com to evaluate its fraud prevention systems and data protection practices.

More articles in this cluster (2)

Threat Graph

2 entities, 1 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Phishing
T1566 - Phishing

Relationships

Phishing related to T1566 - Phishing

Common questions

What triggered the investigation?

The investigation was triggered by reports of users in Madrid being defrauded through non-existent bookings.

What is the Digital Services Act?

The Digital Services Act is EU legislation that sets out responsibilities for online platforms regarding user safety and transparency.

How is Booking.com responding to the investigation?

Booking.com has stated that it is cooperating with the European Commission's investigation.

Continue Reading

Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…

Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…