The EU Commission has opened a formal probe into Booking.com over fake hotel ads and potential data theft, assessing whether the platform adequately removes illegal listings and protects user information.

The investigation also considers transparency concerns around boosted paid listings and whether advertisers gain unfair visibility on the site.

Blending with broader EU policy, the case relies on the Digital Services Act, part of Brussels’ wider use of the DSA against major online platforms.

Booking.com was designated a Very Large Online Platform under the DSA in April 2023, triggering enhanced obligations and coordinated enforcement with Dutch authorities.

If violations are found, penalties could reach up to six percent of Booking.com’s global turnover, and the investigation may also consider interim measures or commitments to remedy issues.

Brussels is pursuing an in-depth evidence-gathering process, including information requests, interviews, and inspections, with the possibility of provisional measures or non-compliance decisions.

European officials have stressed consumer protection as a priority, urging Booking.com to take strong responsibility to curb fraud in online holiday bookings.

Booking.com says it is cooperating fully, noting a significant rise in fraud attempts in 2026 and ongoing cross-border cases, including incidents in Spain.

Investors should watch for regulatory signals as the DSA framework requires risk assessment and mitigation measures, with potential implications for European operations.

The broader objective remains to safeguard consumers, ensure clearer advertising, and uphold data security, with penalties possible if breaches are confirmed.

The commission maintains that Booking.com, as a gateway platform, must update its fraud risk analyses and countermeasures, especially regarding risk management documentation from 2023 onward.

Market reaction shows BKNG stock has exhibited volatility; today’s development is meaningful but not a definitive reset of the company’s outlook.