Fake 10 Downing Street listing 'exposes security failures' on Booking.com

A bogus listing for 10 Downing Street was able to be set up on Booking.com in an investigation by a consumer watchdog.

Which? says its researchers were able to book a fake week-long stay at the prime minister's official residence in central London.

It says it was also able to leave a fake review claiming how enjoyable it was "hanging out with Larry the cat".

The consumer group says the listing was allegedly set up in minutes, showing the famous 10 Downing Street front door and its address.

It claims Booking.com processed a payment for a stay from a researcher, and six weeks later the money had still not been refunded.

Which? says its investigation "uncovered systemic security failures across the platform", and is now calling for Ofcom to take action.

Rory Boland, editor of Which? Travel, said: "If Booking.com's so-called sophisticated AI systems can't spot that 10 Downing Street is not a holiday rental, then it's no wonder scammers can exploit the platform so easily.

"It would be laughable that we were able to list the UK's most famous address for rent, if the consequences weren't so devastating for holidaymakers, who risk losing thousands of pounds to bogus listings and phishing links.

"Booking.com's checks are clearly unfit for purpose, and the prime minister must now urge Ofcom to use the Online Safety Act to crack down on irresponsible online platforms that leave consumers wide open to fraud."

The listing set up on 18 June was headlined '1 bedroom apart in the heart of London' and promised a four-minute walk to the Houses of Parliament.

Which? says the booking window was only opened briefly so that a representative could do a test before it was closed again.

The watchdog says Booking.com removed the listing on 27 August.

A Booking.com spokesperson said: "This limited test is not a true reflection of the experience of millions of listings on our platform. The property added by Which? was not visible to customers or 'live' for the time period referenced.

"We use a range of checks, verification measures and artificial intelligence, which help us detect and remove the majority of fraudulent listings within 24 hours."

The travel site says that as the property was not open and bookable, some of its automatic fraud controls were not triggered to remove the fraudulent listing completely.

It says that fraud affects many industries, adding it continues to strengthen defences to help protect customers and accommodation partners.

Read more from Sky News:
New test can diagnose illness with just one DNA check
21 people killed in bus crash in area popular with tourists

Booking.com is a digital travel site which enables users to book accommodation - including holiday rentals and hotels - as well as flights, car rentals and attractions. It was founded in 1996 and, according to its website, offers more than 28 million reported accommodation listings.

Which? says it has received "endless reports from consumers with dozens of complaints of receiving scam messages on the platform and hundreds of people arriving at properties to discover that the listing was fake".

It is urging Ofcom to launch an investigation into "Booking.com's compliance and take robust action to stop the platform from continuing to break the rules".

An Ofcom spokesperson said: "For illegal content generated by users, platforms have existing legal duties that mean they must take it down swiftly once they become aware of it.

"Booking.com is not in scope of future rules that will apply to paid-for fraudulent advertising, and any change to that would be a matter for government."

(c) Sky News 2026: Fake 10 Downing Street listing 'exposes security failures' on Booking.com