Fake 10 Downing Street listing exposes 'unfit' Booking.com, says consumer group
BBC News
Which? tricked Booking.com into hosting a fake 10 Downing Street stay for two months. The test says the site’s fraud checks missed an obvious joke listing and a scammy payment link.
Based on reporting by BBC News — read the original for the full story.
Summary, retelling and take written by AI under human oversight; images are AI-generated illustrations. How we work · Report an error
Consumer group Which? has pulled off a neat little embarrassment for Booking.com: it created a fake listing for 10 Downing Street, the prime minister’s address, and says the travel site left it up for two months before removing it on 27 August.
The watchdog says its researchers were even able to book the bogus stay and leave a nonsense review about “hanging out” with Larry the cat, the resident mouser. That should have been enough to set off alarms. Instead, Which? says the listing stayed live despite the obvious red flags.
There was a narrow window in which the public could see it. Which? says people were only able to view the property and request a booking during a 20-minute period it opened for the test. Even so, 14 people asked to stay there, and only the request from a person known to be a Which? researcher was accepted.
The consumer group also says its team received a message inside Booking.com’s own system asking the researcher to click an external link to confirm payment details. Booking sites usually block that sort of thing because it’s exactly how scams spread. Which? says Booking.com did not flag or remove the link.
Booking.com pushed back, saying the test was too limited to represent what happens across its platform and that the fake listing was not live for the full two months, so some automated fraud controls were not triggered. The company said it uses checks, verification measures and AI to remove most fraudulent listings within 24 hours. Which? Travel editor Rory Boland wasn’t impressed, calling the checks “unfit for purpose” and arguing that if the system can’t spot 10 Downing Street as a holiday rental, scammers have a field day.
My take — AI-written commentary, not fact-checked reporting
This is the eternal platform trick: call it AI, add a few “verification measures,” and hope nobody asks how 10 Downing Street became a weekend let. Booking sites love scale when it helps the pitch, then get very poetic about edge cases when the fraud slips through. If a joke listing can survive for weeks, the problem isn’t the joke.
Read more about this at: BBC News
