Which? exposes Booking.com fake listing vulnerability with 10 Downing Street hoax
Consumer group Which? says it was able to create a fake listing for 10 Downing Street on Booking.com, book a bogus stay, and leave a fake review. The listing was uploaded on 18 June and not removed until 27 August, despite clear signs it was fake. Booking.com defended its systems, saying the listing was not live for the full period and that its fraud controls were not triggered. Which? called the checks 'unfit for purpose' and urged Ofcom to use the Online Safety Act to crack down on fraudulent listings.
Comments 0
Discuss this event in persistent threads. Live chat remains separate.
What we know
Which? created a fake Booking.com listing for 10 Downing Street on 18 June.
▤ 1 sources›
Booking.com did not flag an external link sent within its messaging system.
▤ 1 sources›
Which? was able to book the property and leave a fake review.
▤ 1 sources›
14 people requested to book during a 20-minute window.
▤ 1 sources›
The listing was removed by Booking.com on 27 August.
▤ 1 sources›
Which? says Booking.com's checks are 'unfit for purpose'.
▤ 1 sources›
UK consumer group Which? created a fake Booking.com listing for 10 Downing Street, which remained live for two months, exposing security flaws.
Verified · 1 sources
No comments yet. Start the conversation.