Brussels opens an investigation against Booking for false advertisements

The European Commission will examine the risks of fraud, the management of reservation data, and the advertising transparency of the platform, which faces fines of up to 6% of its global turnover.

P 069155 00 46 01 ORIGINAL 399034

P 069155 00 46 01 ORIGINAL 399034

Add DEMÓCRATA to Google

Ask FREN

Published

Last updated

4 minutes

Most read

Elecciones 29N · Encuestas

La media de las encuestas

Media a 21 de octubre de 2026 · 15 institutos

  • PP31,6 %
  • PSOE26,9 %
  • Vox18,7 %
  • Sumar6,3 %
  • Podemos3,1 %
  • ERC2,2 %
010203040ene 2024jul 2024ene 2025jul 2025ene 2026jul 2026

Media del último estudio de cada instituto en 30 días y su evolución semanal desde el 23J. Partidos con al menos un 2 %.

Todas las encuestas

Elecciones generales del 29 de noviembre · Demócrata

Brussels is now focusing on the fraudulent advertisements that the Booking platform may be offering to its customers. Community services have detected possible violations of European legislation on digital services by considering that the company may be favoring scenarios conducive to phishing scams and the dissemination of fraudulent accommodation offers. If the violations are confirmed, the fine could reach up to 6% of its global turnover, which would mean a penalty close to one billion euros.

The community executive will open a procedure to examine whether the company carried out the necessary assessments regarding the risks linked to the dissemination of this type of false advertisements, including those related to non-existent properties. The investigation will also address possible identity fraud and the publication of fictitious accommodation offers. "Booking is not doing enough to mitigate these risks," says a senior community official.

Reservation and advertising data under scrutiny

The procedure will not be limited solely to fraudulent advertisements. The European Commission also wants to examine the risks related to the way reservation and guest data is shared with accommodation providers, as well as the measures taken by the platform to prevent this information from being used for fraudulent purposes.

Alongside this, Brussels will scrutinize the operation of those advertisements whose advertisers pay a higher commission to the company to increase their visibility within the platform.

The goal is to determine whether Booking is complying with the advertising transparency obligations set out in community legislation. In particular, it seeks to ensure that users can easily verify who is behind each advertisement, who has paid for its publication, why they are being shown it, and how they can modify the parameters that determine the advertising they receive.

"We feel that what they have done so far is absolutely deficient," says one of the voices involved in the procedure. The consulted sources remind that, under European legislation, users have the right to "understand when and on whose behalf an advertisement is shown to them."

The opening of this file is the result of a preliminary investigation carried out by community services, which will now proceed with the examination of the possible deficiencies detected on the platform. "Europeans should be able to book their vacations without fear of being scammed," explained this Wednesday the Executive Vice-President of the European Commission responsible for Technological Sovereignty, Henna Virkkunen.

The cases of Madrid, among the background examined by Brussels

The same sources confirm that, in the decision to open this investigation, the latest cases of fraud detected in Madrid have also been taken into account.

Not far from here, in Spain, the Retiro Norte Neighborhood Association and the Organization of Consumers and Users (OCU) have requested a strengthening of controls over advertisements for tourist accommodations after dozens of travelers showed up at a building on Menéndez Pelayo Avenue, in the Madrid district of Retiro, where they found that the establishment they had booked through Booking did not exist.

Neighbors reported the continuous arrival of tourists who, accompanied by their suitcases, were looking for the accommodation they believed they had contracted. In fact, in the images circulated on social media, several signs can be seen, written in Spanish and English and placed at the entrance of the building, warning that the accommodation advertised on Booking is not located in that building.

In other notices, it is specified that it is a property for residential use only, that there is no hotel or hostel, and that no rooms are offered for rent. The messages also urge those affected to report what happened to the platform or to file a complaint with the National Police. For its part, the company assured that it was investigating "the criminal activity" linked to this case and emphasized that it had acted "immediately" to remove the advertisement and prevent more users from being harmed.

Fines of up to 6% of global turnover

The European Commission estimates the impact of problems associated with digital fraud in the European Union at nearly 4 billion euros, a dimension that, in the opinion of community services, reinforces the need to demand greater responsibility from digital platforms in identifying and mitigating these risks.

With this type of procedures, Brussels aims to convey a message to the entire sector about the obligations imposed by European regulations, especially regarding consumer protection, the transparency of advertisements, and the prevention of fraudulent activities. However, the opening of a formal investigation does not prejudge its outcome nor necessarily implies the imposition of a sanction. The community Executive will now have to examine Booking's practices and determine whether the measures adopted by the company are sufficient to meet regulatory requirements.

"It is too early to say whether this will lead to three fines (...). We must also emphasize that, of course, the dialogue with Booking will continue," explains a community official. The Commission thus keeps the dialogue channel open with the platform while advancing in the analysis of possible non-compliances, with the possibility of adopting additional measures if it concludes that the mechanisms for preventing and mitigating risks remain insufficient.

More key points, information and questions with FREN

AI-GENERATED CONTENT

What is the process for handling a formal investigation by the European Commission against a digital platform like Booking?

A formal investigation by the European Commission against a platform like Booking generally follows these phases: opening, evidence gathering, statement of objections, defense, and final decision. Opening the case does not mean there is an infringement. The fundamental difference lies in the legal basis: a competition procedure does not have exactly the same deadlines, requirements, and sanctions as one under the Digital Markets Act (DMA).

1. Identifying the applicable regulation

In competition law, the Commission can investigate restrictive agreements or abuses of dominant position under Articles 101 and 102 of the Treaty on the Functioning of the EU. Being dominant is not illegal; abusing that position can be. Under the DMA, compliance with specific obligations of gatekeepers is examined—platforms that act as essential intermediaries between businesses and consumers. Booking Holdings was designated in May 2024 for Booking.com, according to the official published information.

2. Preliminary actions and formal opening

The Commission can act on its own initiative, complaints, or information from national authorities. First, it gathers indications through requests and market analysis. If it decides to open a formal procedure, it identifies the practices under investigation and their possible legal classification. In a booking platform, contracts, commissions, or access conditions might be examined; these examples do not imply that Booking is being investigated for all of them.

3. Investigation and possible interim measures

The Commission requests information from the company and third parties, conducts interviews, and may carry out inspections. It cross-checks documents and data to verify if suspicions hold. Incomplete or false information and obstruction can lead to separate sanctions.

Before deciding, it may adopt interim measures. In competition law, these require an initial assessment of infringement and urgency due to risk of serious and irreparable harm to competition. They are temporary and do not replace the final decision, as illustrated by the procedure related to WhatsApp.

4. Objections and rights of defense

If a possible infringement is identified, the Commission communicates its preliminary conclusions: in competition law, through a statement of objections. The company can learn the accusations, access the file with protection of confidential information, and respond in writing. In competition procedures, it can also request an oral hearing, with the participation of the hearing officer. The objections remain provisional: the Commission must consider the defense before deciding. These guarantees are explained in the official competition guide.

5. Possible outcomes
  • Dismissal: if there is insufficient basis to continue.
  • Commitments in competition: the company offers changes, third parties are consulted, and the Commission can make them binding without declaring an infringement. Non-compliance can be sanctioned.
  • Infringement decision: may order cessation, impose corrective measures and fines, according to the competition framework.
  • DMA non-compliance: fines can reach 10% of worldwide turnover and 20% in case of repetition; systematic non-compliance may justify additional remedies, according to the official DMA explanation.
6. Duration and appeal

In competition law, there is no general legal deadline for closure: complexity and defense rights influence it. For DMA non-compliance decisions, the Commission must seek to resolve within twelve months from opening. The company can appeal to the General Court of the EU; the appeal does not automatically suspend the decision. Afterwards, the Commission monitors compliance and may impose coercive payments.

What are the competencies and functions of the European Commission's Executive Vice-President responsible for Technological Sovereignty?

The responsible person is Henna Virkkunen, Executive Vice-President of the European Commission for Technological Sovereignty, Security, and Democracy since December 2024. Her role combines leading digital policy with a transversal responsibility: connecting European technological autonomy with security and the protection of rights and democratic institutions.

Her mandate is not limited to regulating tech companies. It also includes promoting industrial capabilities, infrastructures, and innovation so Europe can make its own decisions and reduce strategic dependencies, according to the official description of her portfolio.

1. Technological sovereignty and innovation

Virkkunen is entrusted with the portfolio of digital and frontier technologies, i.e., advanced technologies capable of transforming the economy. Her main functions include:

  • Artificial intelligence: fostering its development and adoption in companies and administrations, collaborating with Member States, industry, and civil society, and promoting a European strategy for AI application.
  • Cloud and computing capacity: promoting European infrastructures for cloud, high-performance computing, and quantum computing, along with initiatives to develop cloud and AI.
  • Semiconductors: strengthening European capabilities and supply chain security, including advances in quantum chips.
  • Data: promoting a European Data Union that facilitates its use for innovation and competitiveness.

Technological sovereignty is not conceived as isolation. In the presentation of the technology package in June 2026, Virkkunen linked it to maintaining openness and fair competition, avoiding dependence on single dominant suppliers.

2. Connectivity and digital transformation

She oversees the objectives of the Digital Decade 2030, including the planned review of the strategy and its goals in 2026. She must also promote secure fixed and wireless broadband connections, work on a Digital Networks Act, and deploy public digital infrastructures, including the European digital identity wallet.

This dimension requires cooperation with telecommunications regulators. Her relationship with BEREC, the European regulators' body, reflects this coordination task to improve connectivity, resilience, and market functioning.

3. Platforms and user protection

Among her responsibilities is ensuring rapid and effective enforcement of the Digital Services Act, which sets obligations for online services and platforms, and the Digital Markets Act, aimed at ensuring open and contestable digital markets.

She also works on e-commerce, manipulative techniques, child safety, social media impact, and cyberbullying. As a practical example, Demócrata reports her intervention on the Commission's preliminary conclusions regarding access of children under thirteen to Instagram and Facebook.

4. Security, democracy, and coordination

Her transversal responsibility covers cyber and hybrid threats, critical infrastructure protection, and the internal and external dimensions of security. It includes strengthening freedoms, justice, the rule of law, and democracy against interference and disinformation, also considering the role of the media.

She does not therefore concentrate all these policies exclusively. As the President explained when presenting the Commission's structure, each Executive Vice-Presidency combines its own portfolio with joint work among Commissioners. In Virkkunen's case, digital policy is mainly articulated with DG CONNECT; security and democracy objectives require coordination with other competent portfolios, not automatic subordination of all their services.

What legal requirements must a digital platform meet to ensure transparency and consumer protection according to European regulations?

A digital platform operating in the EU must comply with a broad set of obligations to ensure transparency and consumer protection. These mainly derive from the Digital Services Act (DSA), the GDPR, the Unfair Commercial Practices Directive, the Consumer Rights Directive (and its “Omnibus” reforms), and other sectoral rules. Broadly, the requirements can be grouped into information transparency, protection against unfair practices, personal data protection, and effective complaint and enforcement mechanisms.

1. Clear, complete, and easily accessible information
  • Provider identity: the platform must visibly indicate its company name, postal address, contact email, commercial register number, and, if applicable, VAT number. This is key for the consumer to know who they are contracting with.
  • Understandable terms and conditions: the terms of use and contracting must be written in clear, non-misleading language, and accessible before the user registers or makes a purchase. They must explain:
    • What services the platform offers and any limitations.
    • How prices are formed, including taxes and additional charges.
    • Cancellation, returns, and refund policies.
    • Conditions for suspension or closure of accounts.
  • Pre-contractual information in online sales: before the consumer is bound, European law requires that they know the total price, the seller's identity, essential characteristics of the product or service, contract duration, and the right of withdrawal when applicable.
2. Clearly differentiating who is the trader and who is the platform
  • Intermediation platforms (marketplaces) must clearly indicate whether the consumer is contracting with:
    • The platform itself, or
    • A third party (professional trader) using the platform.
  • In the case of third parties, it must be prominently indicated whether it is a “trader” (business) or a private individual, since full consumer rights only apply in business-to-consumer relationships.
  • When the combination of services may create confusion about who is responsible towards the consumer (e.g., “fulfillment” models or bundled services), the platform must clarify the distribution of responsibilities and not present a misleading overall image.
3. Transparency in ranking, advertising, and recommendations
  • Ranking criteria: platforms showing listings (products, accommodations, content, etc.) must generally explain which factors mainly influence the order of results (price, relevance, popularity, paid placement, etc.).
  • Clearly identified advertising: ads must be recognizable as such; the user must know:
    • That it is advertising content.
    • On whose behalf the ad is shown, as reasonably as possible.
    • If a highlighted result is due to payment or a commercial agreement.
  • Recommenders and personalization: when content or offers are personalized (e.g., via profiles), the platform must inform that such a system is used and the main parameters governing it, offering a non-personalized option when possible.
  • Prohibition of “dark patterns”: the DSA and consumer law consider interfaces designed to manipulate or coerce users unlawful (e.g., hiding cookie rejection options, confusing about real costs, or disproportionately hindering unsubscription).
4. Personal data protection and privacy
  • Legal basis and purpose: data processing must be based on a legal ground (consent, contract, legitimate interest, etc.) and limited to specific, explicit, and legitimate purposes.
  • Information about processing: the privacy policy must explain what data is collected, for what purpose, for how long, to whom it is disclosed, and how to exercise rights of access, rectification, erasure, objection, restriction, and portability.
  • Consent for cookies and tracking: storing or accessing information on the device (cookies, similar identifiers) that are not strictly necessary requires free, specific, informed, and revocable consent.
  • Privacy by design: the platform must apply technical and organizational measures that minimize data, ensure security, and prevent incompatible uses, especially regarding sensitive profiles or minors.
5. Security, removal of illegal content, and user support
  • Notification and removal mechanisms: platforms hosting third-party content must have accessible systems for users and authorities to report illegal content, and must act with reasonable diligence to remove or block access when they have actual knowledge.
  • Information to affected users: when content is removed or an account restricted, generally the user must be informed of the reason, the basis of the decision, and appeal options.
  • Effective complaint channels: there must be a clear procedure to submit complaints and claims, as well as information about alternative dispute resolution mechanisms (ADR/OADR) when applicable.
  • Service security: the platform must implement reasonable measures to protect accounts against unauthorized access, fraud, and cyberattacks that could harm users.

Overall, complying with these requirements means integrating transparency and consumer protection into the platform's design (from the interface to internal policies), periodically reviewing legal texts, and adapting processes to continuous updates of European regulations.

Can you detail what specific obligations the Digital Services Act (DSA) introduces for online platforms of different sizes? How should a digital platform draft a privacy policy to comply with the GDPR and be understandable to the average user? What interface design practices are considered “dark patterns” contrary to European consumer and digital services regulations?

Play

Test your knowledge with FREN!

How much do you know about this topic? Answer the following 3 questions.

What is the main reason the European Commission has opened a formal investigation against Booking?

Question 1 of 3

What type of ad-related fraud was recently detected in Madrid and cited as a precedent in the investigation?

Question 2 of 3

What percentage of global turnover could the fine to Booking reach if the violations are confirmed?

Question 3 of 3