[Brussels, October 2026] — A surge of online fraud is targeting international visitors to Europe, with over 150 unofficial websites reportedly advertising application services for the European Travel Information and Authorisation System (ETIAS). These platforms are actively soliciting sensitive passport information and payments for a service that the European Union has not yet launched.

The proliferation of these scams coincides with a complex transition in European border management. While the Entry/Exit System (EES) is now fully active, the ETIAS authorization remains inactive, creating a gap in public understanding that cybercriminals are aggressively exploiting.

Digital Border Transition Increases Vulnerability

The European Union is currently overhaulng its international border protocols to modernize security and tracking. This transition involves two distinct digital frameworks: the EES and the ETIAS. While they are often mentioned together, they serve entirely different functions.

The EES is designed to digitally record the entry and exit movements of eligible non-EU nationals, replacing manual passport stamping. In contrast, ETIAS is intended as a pre-travel screening mechanism for visa-exempt visitors.

Confusion between these two systems has created a lucrative environment for scammers. Many travelers mistakenly believe that the biometric registration required for EES is the same as the advance authorization required for ETIAS. Fraudulent operators are capitalizing on this misunderstanding by positioning themselves as "essential" intermediaries for a process that does not yet exist.

Network of 150+ Fake Portals Exploiting Travelers

Reports indicate that a network of more than 150 third-party websites is currently mimicking official European Union portals. These sites often use sophisticated design elements—including EU flags, passport imagery, and formal institutional language—to deceive users into believing they are interacting with a government entity.

These portals typically appear in search engine results through paid advertisements. Once a traveler clicks through, the site prompts them to submit their passport details and pay a fee for "immediate authorization" or "expedited processing."

Industry sources warn that no commercial entity, travel agency, or documentation company has the authority to issue an official ETIAS authorization. Only the European Union can grant this permission once the system is formally activated.

The risks associated with these platforms extend beyond the immediate loss of the application fee. By submitting passport numbers and payment credentials, travelers are exposing themselves to long-term identity theft and financial fraud.

Fraud Risk How Travelers Are Affected Potential Consequences
Excessive Application Charges Websites demand additional processing payments Unnecessary financial losses
Passport Information Collection Visitors submit passport numbers and personal details Identity theft and misuse of personal information
Payment Information Theft Fraudulent portals collect card details Unauthorised transactions
False Approval Promises Websites claim to issue immediate authorisation Incorrect travel documentation
Phishing Communications Fraudsters contact applicants using submitted information Further financial and identity-related fraud
Misleading Service Descriptions Commercial services appear to represent EU authorities Travellers misunderstand their actual obligations

Current Operational Status of EES and ETIAS

The primary source of confusion for travelers is the staggered rollout of these two systems. The Entry/Exit System (EES) followed a progressive implementation strategy, beginning on 12 October 2025. According to official data, the EES became fully operational across all participating external Schengen border crossing points on 10 April 2026.

ETIAS, however, has faced a series of implementation delays. While previous guidance from the European Commission suggested a launch in the fourth quarter of 2026, the official portal currently states that the system is not operational and no applications are being collected.

Adding to the uncertainty, the Polish government issued an advisory on 20 October 2026, stating that the introduction of ETIAS is now planned for 2027. It is important to note that this represents a national government's expectation and not a confirmed operational date issued by the European Commission.

The following table clarifies the current distinctions between the two systems:

Particulars Entry/Exit System (EES) European Travel Information and Authorisation System (ETIAS)
Current status Fully operational Not operational
Launch 12 October 2025 Planned for 2027 (per Polish government advisory)
Main purpose Digitally record entry/exit movements Pre-travel screening for visa-exempt visitors
Cost No fee Proposed €20 fee

Why This Matters: The Impact on the Modern Traveler

For the international traveler, this situation highlights a critical shift in how "official" information is consumed. In the digital age, a high ranking in search results or a professional-looking website is no longer a proxy for legitimacy.

From a logistical standpoint, the danger is that travelers may believe they have secured their entry requirements through a fake site, only to arrive at a European border and discover they lack the necessary authorization (once ETIAS eventually launches). This could lead to boarding denials or deportation.

Furthermore, the collection of passport data by these 150+ sites creates a massive repository of sensitive information that can be sold on the dark web. For the user, the "convenience" of using a third-party site to handle paperwork is a high-risk gamble.

Travelers should adopt a "zero-trust" approach to EU travel authorizations until the European Commission officially opens the application portal. Any website requesting a fee for ETIAS today is, by definition, not providing an official government service. The only safe course of action is to monitor official .europa.eu domains for updates.

Recommended Read: