ON
← Back to feed
Fake 10 Downing Street listing exposes 'unfit' Booking.com, says consumer group
United Kingdom🏛️ PoliticsLean Progressive9/2/2026

Fake 10 Downing Street listing exposes 'unfit' Booking.com, says consumer group

Consumer group Which? conducted a test where it created a fake listing for 10 Downing Street on Booking.com, allowing researchers to book a fictional stay and leave a humorous review. Despite clear indicators that the listing was fake, Booking.com did not remove it until two months later. The company explained that some automated fraud detection tools were not activated since the listing was not 'live' on the platform during that period. Which? criticized Booking.com's security measures, arguing that its AI systems failed to identify the fake listing, raising concerns about the safety of users against scams. The incident highlights ongoing criticisms of Booking.com's ability to protect users from fraudulent activity.

Fake 10 Downing Street listing exposes 'unfit' Booking.com, says consumer group Consumer watchdog Which? claims it successfully created a fake listing for 10 Downing Street on Booking.com, highlighting serious security vulnerabilities on the travel platform. According to the watchdog, it managed to upload a listing for the British prime minister’s official residence, complete with the correct address and a photograph of the iconic black front door. The listing remained active for nearly two months before being removed on 27 August. During this time, the platform processed a payment for a week-long stay from a Which? researcher, and the fake review of the property was also posted without apparent intervention. The fake listing was created in early June, with settings configured so that users had to request a stay rather than booking automatically. This allowed researchers to conduct tests without immediate bookings. Over the course of 20 minutes, 14 individuals attempted to book the property, but only the request from a known Which? researcher was accepted. Additionally, the watchdog’s team was sent a message containing an external link requesting payment confirmation, a common tactic used by scammers. Despite Booking.com’s claim that such links are blocked to prevent fraud, the link was not flagged or removed. Booking.com responded to the allegations, stating that the listing was not "live" for the entire duration it was present on the platform. As a result, some of its automated fraud detection tools were not activated. A spokesperson noted that the company uses a combination of AI and manual checks to identify and remove fraudulent content within 24 hours. However, they emphasized that the specific case involving 10 Downing Street does not reflect the typical user experience on the platform. The fake review submitted by Which? described the stay as "exceptional" and included a humorous reference to "hanging out with Larry the Cat," the prime minister’s pet. Despite the obvious nature of the review, it was posted almost instantly and remained visible for weeks. Booking.com acknowledged that the review was eventually reviewed by its moderation team but did not clarify whether it was flagged as suspicious. The incident has sparked concern among consumer advocates, particularly regarding the potential risks posed to genuine users. Rory Boland, editor of Which? Travel, criticized Booking.com’s security measures, calling them "unfit for purpose." He argued that if the platform cannot recognize that 10 Downing Street is not a legitimate holiday rental, it leaves users vulnerable to scams. "It would be laughable that we were able to list the UK’s most famous address for rent, if the consequences weren’t so devastating for holidaymakers," he said. Which? has previously raised concerns about Booking.com’s security protocols, reporting numerous instances of users falling victim to phishing attempts and encountering fake listings. The watchdog claims it has received "dozens of complaints" from users affected by scams on the platform, as well as accounts of travelers arriving at properties only to find they were not real. These incidents have led to calls for stricter oversight, with Boland urging the Prime Minister to leverage the Online Safety Act to hold Booking.com accountable. Booking.com maintains that its systems are designed to handle the vast volume of listings on its platform, many of which are legitimate. The company reiterated that while the specific case involving 10 Downing Street does not represent the norm, it continues to improve its fraud detection capabilities. It also pointed out that not all of the listings mentioned by Which? have been confirmed as fraudulent. Nevertheless, the repeated exposure of security lapses raises questions about the effectiveness of its current safeguards.

How this report was made. Objective News wrote this report from 6 source articles, using AI-assisted synthesis under our methodology. It is our own text, not a copy of any single outlet. Read our methodology.

Responsible editor: Matej BašaSpotted an error? Report it

6 reports

BBC News (UK) logoBBC News (UK)State / PublicProgressiveFactual 95Objective 859/2/2026
Fake 10 Downing Street listing exposes 'unfit' Booking.com, says consumer group

Consumer group Which? conducted a test where it created a fake listing for 10 Downing Street on Booking.com, allowing researchers to book a fictional stay and leave a humorous review. Despite clear indicators that the listing was fake, Booking.com did not remove it until two months later. The company explained that some automated fraud detection tools were not activated since the listing was not 'live' on the platform during that period. Which? criticized Booking.com's security measures, arguing that its AI systems failed to identify the fake listing, raising concerns about the safety of users against scams. The incident highlights ongoing criticisms of Booking.com's ability to protect users from fraudulent activity.

Bias read (Progressive): The article frames Booking.com's failure to detect the fake listing as a significant security flaw, emphasizing the potential risks to consumers. It uses language that suggests a lack of adequacy in Booking.com's systems, which aligns with a left-leaning critique of corporate responsibility and user

Why factuality (95): The article accurately reports the findings of Which? regarding the fake 10 Downing Street listing on Booking.com. It includes specific details like the duration the listing remained active, the fake review, and Booking.com's response. While it quotes a spokesperson from Booking.com, it does not pre

Why objectivity (85): The tone remains neutral, presenting both sides of the issue. However, there is some editorializing in phrases like 'laughable' and 'devastating,' which may lean towards a critical stance toward Booking.com.

Daily Mirror logoDaily MirrorIndependentCenterFactual 95Objective 859/1/2026
No 10 Downing Street advertised as holiday let in fake listing on travel giant Booking.com

Consumer watchdog Which? discovered significant security vulnerabilities in Booking.com by successfully creating a fake listing for 10 Downing Street, the official residence of the UK Prime Minister. The listing included the correct address, a photo of the iconic black front door, and even a fake review. Despite Booking.com's claims of using advanced AI and security measures, the fake listing remained visible for several months before being removed. Which? highlighted the risks posed to travelers, including financial loss due to scams and phishing attempts. Booking.com responded by stating that this isolated test does not reflect the overall safety of their platform.

Bias read (Center): The article presents a factual report on a security flaw discovered by a consumer watchdog, without overtly favoring any political side. It includes quotes from both Which? and Booking.com, providing balanced perspectives on the issue.

Why factuality (95): This article provides detailed and consistent reporting of the fake listing incident, including the timeframe, the fake review, and the lack of action by Booking.com. It aligns closely with the other sources and presents the facts without introducing new or conflicting information.

Why objectivity (85): The language is generally neutral, but there is a slight emphasis on the severity of the issue, particularly in phrases like 'glaring security flaws.' This suggests a somewhat critical tone, though not overtly biased.

The Independent logoThe IndependentIndependentProgressiveFactual 95Objective 859/1/2026
Fake 10 Downing Street listing set up ‘within minutes’ on Booking.com

A fake listing for 10 Downing Street appeared on Booking.com within minutes, allowing a researcher to make a payment for a week-long stay. The listing, created by consumer organization Which?, included a fake review and a phishing attempt. Despite Booking.com claiming it could detect fraudulent URLs, the listing remained active for over six weeks before being removed. Which? criticized the platform's security measures, warning of risks to travelers and calling for regulatory action under the Online Safety Act.

Bias read (Progressive): The article frames the incident as a failure of Booking.com's security systems, highlighting risks to consumers and criticizing the platform's lack of safeguards. While not overtly partisan, the emphasis on consumer protection and calls for regulatory intervention align with progressive concerns. It

Why factuality (95): The article accurately reflects the findings of Which? regarding the fake listing, including the setup time, the fake review, and the processing of payments. It maintains consistency with other reports and does not introduce contradictory information.

Why objectivity (85): While the article presents the facts objectively, there is a subtle critique of Booking.com's security measures, especially in mentioning systemic failures. This leans slightly toward a critical perspective.

Daily Mail logoDaily MailIndependentProgressiveFactual 95Objective 829/2/2026
Booking.com's glaring security issues exposed by fake '10 Downing Street' listing in undercover investigation

A Which? investigation revealed significant security flaws in Booking.com, as researchers successfully created a fake listing for 10 Downing Street and processed a payment for a week-long stay. Despite Booking.com's claims of using advanced AI and security measures, the fake listing was approved within minutes, and the platform failed to detect the suspicious activity. Researchers were able to add a fake review and even send an external URL containing a phishing link, which Booking.com did not block. Payments made during the fake listing were not refunded, and the listing remained active for over two months before being removed.

Bias read (Progressive): The article frames Booking.com's security failures as a serious threat to user trust and national security, emphasizing the potential risks of fake listings involving high-profile locations like 10 Downing Street. It highlights systemic issues in the platform's moderation and customer support, which

Why factuality (95): The article reports on a Which? undercover investigation into Booking.com's security flaws, specifically highlighting the creation of a fake listing for 10 Downing Street. It cites specific actions taken by the researchers, such as setting up the listing, processing payments, and the lack of refund.

Why objectivity (82): The article maintains a generally neutral tone, presenting the findings of the Which? investigation without overt bias. However, it uses emotionally charged language like 'glaring security issues' and 'fake listing,' which may subtly frame the issue as a significant failure. While not overtly partis

Sky News (UK) logoSky News (UK)IndependentCenterFactual 95Objective 809/2/2026
Fake 10 Downing Street listing 'exposes security failures' on Booking.com

A fake listing for 10 Downing Street was discovered on Booking.com during an investigation by a consumer watchdog. The listing highlighted potential security vulnerabilities in the platform's verification process. The incident raised concerns about the ability of online booking services to prevent fraudulent listings of high-profile locations. Authorities are now examining whether Booking.com failed to adequately verify the authenticity of the listing.

Bias read (Center): The article presents a factual report on a security issue without overtly criticizing or praising any political entity. It focuses on the technical failure of a service rather than taking a partisan stance on governance or policy.

Why factuality (95): This article provides a comprehensive account of the fake listing, including the setup time, the fake review, and the payment processing. It aligns with other reports and presents the facts consistently. The mention of user complaints adds credibility.

Why objectivity (80): There is a noticeable editorial tone in phrases like 'glaring gaps in security' and 'consumer champions,' which suggest a critical view of Booking.com. This reduces the overall objectivity.

The Guardian (UK) logoThe Guardian (UK)IndependentCenterFactual 90Objective 859/2/2026
Fake 10 Downing Street listing on Booking.com highlights security failures

Researchers from the consumer watchdog Which? discovered a fake listing for 10 Downing Street on Booking.com, complete with a photo of the prime minister's home and a false address. The listing, created on 18 June, allowed users to request stays but not make automatic payments, and was part of a test conducted by the watchdog. A payment for a week-long stay was processed, and the money had not been refunded six weeks later. A fake positive review was also posted, referencing a cat named Larry. Booking.com stated the listing was not visible to customers and that they use AI and verification measures to combat fraud, though the watchdog claims systemic security issues exist.

Bias read (Center): The article presents a balanced account of the incident, citing both the findings of Which? and the response from Booking.com. It does not take a clear ideological stance on the issue of online security or the role of private companies in regulating content. The framing remains neutral, focusing on

Why factuality (90): The article summarizes the main points of the incident without providing extensive details. It aligns with the cross-source consensus on the fake listing and Booking.com's response. However, it lacks some specifics found in other articles, which slightly affects its factuality score.

Why objectivity (85): The tone is neutral, but the phrase 'exposes security failures' implies a judgment, which introduces a minor bias.

How each side covered it

The same event, grouped by the political lean of the outlets covering it.

How each side covered it

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Covered around the world

The same event as reported in other countries.

Covered around the world

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Claims check

Key factual claims, and how many sources assert vs dispute each.

Claims check

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Keep the news honest.

ObjectiveNews is reader-funded and ad-free — we show you the bias instead of hiding it. Support independent journalism for €4/month.

Become a Supporter

Related stories