Booking.com scams are back in the headlines after the European Commission opened a formal investigation into how the platform deals with fake listings, phishing messages and paid-for search placements. If you have a winter city break, a Christmas market trip or a family visit booked through the site, the news may feel unsettling. The good news is that most of these scams follow a few predictable patterns, and once you know them they are surprisingly easy to spot.
This guide explains what the EU is investigating, how the most common tricks work, and the simple checks that keep your money and your holiday safe, whether you book from London, Berlin, Toronto or New York.
What the EU Investigation Is About
On 21 October 2026 the Commission opened proceedings under the Digital Services Act, the EU law that sets rules for very large online platforms. The probe has three strands:
- Fraudulent listings: properties that do not exist, or that are advertised by someone who is not the real owner.
- Phishing: scams that exploit reservation and guest data, including through the messaging system between guests and hosts.
- Boosted listings: whether properties that pay a higher commission to rank higher in results are clearly labelled as advertising.
Opening proceedings does not mean the company has been found guilty of anything, and Booking.com has said it is cooperating fully. But officials pointed to a sharp rise in reported travel fraud across member states, and the case puts a spotlight on risks that apply to every booking platform, not just one. You can read the details in the European Commission announcement.
How the Most Common Booking.com Scams Work
Almost every booking scam has the same goal: to get you to pay money, or hand over card details, outside the platform’s normal payment system. Here are the versions travellers report most often.
1. The “verify your card” message
A few days or weeks after you book, you receive a message saying your payment failed or your card needs to be verified within 24 hours, or the reservation will be cancelled. The message often includes your real name, dates and hotel, which makes it look genuine. The link leads to a convincing copy of a payment page. This usually happens when a property’s own account has been taken over by criminals, so the message can even appear inside the official app.
2. The fake or hijacked listing
Here the property itself is the problem. Scammers copy photos from a real apartment, list it at an attractive price in a busy city and collect bookings. Sometimes they hijack the account of a genuine host. Either way, you may arrive to find the address does not exist or the owner has never heard of you.
3. The “pay us directly for a discount” offer
A host suggests you cancel through the platform and pay by bank transfer, cryptocurrency or a payment app, in exchange for a lower price. Once you leave the platform, you also leave its customer protection behind.
4. Fake customer service numbers
Search for a help line in a hurry and you may land on a sponsored result or a lookalike website run by fraudsters. They will happily “fix” your booking in return for your card number.
Warning Signs to Watch For
Most Booking.com scams leave clues. Slow down if you notice any of the following:
- Urgency: a deadline of a few hours, or a threat that your booking will be cancelled.
- A request to pay by bank transfer, gift card, crypto or a payment app.
- A link that asks you to re-enter full card details, including the security code.
- A price far below similar properties in the same neighbourhood.
- Brand-new listings with no reviews, or reviews that all sound the same.
- Spelling mistakes, odd sender addresses or a web address that is slightly wrong.
Smart Habits Before You Book
Check the listing, not just the photos
Run one or two photos through a reverse image search. If the same apartment appears in other cities or on unrelated sites, walk away. Look up the address on a map and check that the street view matches the building in the listing.
Read recent reviews carefully
Sort reviews by newest. A property with years of good feedback and a sudden run of complaints about payment problems may have had its account compromised.
Understand boosted results
The property at the top of the list is not always the best match for your search. Some providers pay for visibility. Use filters for location, rating and price, and compare a few options rather than trusting the first result.
Pay with a credit card where possible
In the UK, the US and Canada, credit cards generally offer stronger protection than debit cards or bank transfers if something goes wrong. Many travellers keep one card just for bookings, which makes unusual charges easy to spot.
Smart Habits After You Book
The weeks between booking and arrival are when phishing messages tend to appear. A few simple rules help:
- Never click a payment link sent by message or email. Instead, open the app or type the website address yourself and check the reservation there.
- If the booking is shown as confirmed and paid in your account, any message saying otherwise is almost certainly a scam.
- Contact the property using the phone number on its official website, not one supplied in a message.
- Turn on two-factor authentication for your travel accounts and your email.
- Screenshot your confirmation, including the price and cancellation policy, in case you need it later.
This matters most in peak seasons. With festive city breaks filling up fast, our guide to the best Christmas markets in Europe for 2026 is a good place to plan, but book through trusted channels and double-check every payment request.
What to Do If You Think You Have Been Scammed
- Call your bank or card provider immediately. Ask them to block the card and dispute the payment. Speed improves your chances of getting money back.
- Report it to the platform through the official app or website, and include screenshots of every message.
- Change your passwords for the booking account and the email address linked to it.
- Report it to the authorities. In the UK that is Action Fraud, in the US the FTC, and in Canada the Canadian Anti-Fraud Centre. EU residents can contact their national police or consumer protection body.
- Warn others by leaving an honest review once the situation is resolved.
Frequently Asked Questions
Is it still safe to use Booking.com?
Millions of people use it every week without problems. The investigation is about how well risks are managed, not a ban. Stay alert, keep payments on the platform and verify any unexpected request.
Why do scam messages know my booking details?
In many cases criminals gain access to a property’s account, which gives them reservation data. That is why a message can look real even when it is not.
Will a hotel ever ask me to pay through a link in chat?
Be very cautious. Legitimate properties may take payment on arrival or through the platform, but a link demanding urgent card verification is a classic warning sign.
What are boosted listings?
They are properties that pay a higher commission to appear more prominently in search results. The EU wants them to be clearly labelled as ads.
Do these tips apply to other booking sites?
Yes. The same tricks appear on many travel platforms and rental sites, so the same checks work everywhere.
