EU Demands Answers from Apple, Google and Microsoft Over Online Scams
On September 23, 2025, the European Commission formally requested detailed information from Apple, Google, Microsoft, and Booking.com under the Digital Services Act (DSA), asking how these platforms detect, mitigate, and respond to financial scams on their services.
Facts
The Commission’s letter addresses practices on App Store / Google Play, where scam banking or investment apps mimic legitimate providers.
For search engines, the inquiry covers fraudulent ads and links, including fake banking sites published via search results.
Platforms are asked to explain Know Your Business Customer (KYBC) procedures — how they verify identity of app publishers or listing providers to prevent misuse.
The DSA empowers regulators to penalize noncompliance by Very Large Online Platforms / Search Engines (VLOPs / VLOSEs) — fines can reach up to 6% of global turnover.
Significance for Businesses
This signals that even dominant platforms are under the microscope for failing to police fraudulent content.
Companies relying on App Stores, search, or ad placement must be alert — platforms’ tightening rules may affect distribution, access, and compliance responsibilities.
It sets a precedent: being a platform isn’t just about services — it also means obligation to protect users from financial harm.
DIAMATIX Comment
This move by the EU underscores a shifting paradigm: platforms must act as guardians, not passive hosts. For clients and organizations, this means architecture and operational models must anticipate stricter oversight. At DIAMATIX, we advise a layered defense: content monitoring, token validation, KYBC validation, and continuous auditing of supply chains. It’s no longer optional — it’s fundamental.
Trusted · Innovative · Vigilant.
Sources
European Commission – Commission requests information under the Digital Services Act from Apple, Booking.com, Google and Microsoft
Official EC Communication
Trusted · Innovative · Vigilant.






