Which? found that Booking.com operates an 'easily hacked messaging system', that it has 'failed to remove scam listings' and that the identity of property owners is not robustly checked.
A Which? investigation warns that Booking.com's lack of proper checks, including identity verification for hosts and strong security systems, leaves it vulnerable to scammers through hacked messaging and unremoved scam listings. Which? is calling for the platform to implement measures like identity checks, two-factor authentication, and banning external links to better protect users from fraud, especially with the upcoming Online Safety Act. Booking.com says it has multiple controls and checks in place.
