How would Booking.com go about identifying scammy emails from compromised accounts? Is that even possible at their scale?

To put that into perspective, has Amazon managed to reliably detect and shut down compromised Marketplace shops yet?