The listing, created on 18 June, advertised a \u201c1-bedroom apartment in the heart of London\u201d and included both a photograph of the famous black front door and the exact address of 10 Downing Street.<\/p>\n
Which? Travel said it deliberately chose one of the world\u2019s most recognisable addresses because it believed the listing was so obviously fake that Booking.com\u2019s security systems would stop it from going live. They didn\u2019t.<\/p>\n
The magazine said the listing was created without its researcher having to provide proof that they owned the property or even prove their identity. Under Booking.com\u2019s own rules, the magazine said, the researcher did not have to provide proof of ID until three months after the listing went live.<\/p>\n
The listing was set up so that prospective guests had to request a stay rather than being able to book automatically.<\/p>\n
However, Which? said 14 people inquired about staying at the property within just 20 minutes of it being opened for bookings.<\/p>\n
\u201cIf you live abroad, you may have no clue this is the Prime Minister\u2019s home \u2013 it\u2019s just a bargain in central London,\u201d the watchdog said.\n<\/p>\n
A week at Downing Street<\/p>\n
The investigation went further when a member of the Which? team was able to make and pay for a week-long booking at the address through Booking.com.<\/p>\n
Which? said Booking.com subsequently cancelled the stay on 31 August, more than two months after the listing was created, and contacted it about a refund.<\/p>\n
The watchdog said it was unclear from the email whether it would receive the entire amount back.<\/p>\n
Which? also tested whether the account could be used to send potential guests away from Booking.com\u2019s website.<\/p>\n
Despite having only registered as a host that day, its researcher was able to use Booking.com\u2019s messaging system to send an external link asking for credit card details to confirm a booking.<\/p>\n
The watchdog highlighted this as particularly concerning because scammers can use external links to direct victims to fraudulent websites designed to steal money or financial information.<\/p>\n
Which? said Booking.com has previously stated that it uses \u201csophisticated AI systems\u201d to detect fraud, questioning why those systems did not recognise an image of one of the most photographed buildings in the world.<\/p>\n
An \u2018exceptional\u2019 stay<\/p>\n
![\"new-york-usa-december-17-2024-booking-com-website-homepage-displayed-on-laptop-screen-with-logo-online-travel-platform-for-booking-hotels\"](\"https:\/\/www.europesays.com\/ie\/wp-content\/uploads\/2026\/09\/1788365595_244_.jpeg\")