- Cybercriminals are ramping up efforts to target travellers as the UK’s Electronic Travel Authorisation (ETA) becomes mandatory for European visitors and the European Travel Information and Authorisation System (ETIAS) edges closer to launch. Javvad Malik, lead security awareness advocate at KnowBe4, warns that these scams present a growing threat not only to holidaymakers but also to organisations managing employee travel.
Sharp increase in travel document frau
Since April 2, when the UK extended the ETA requirement to European citizens, reports of fraud have surged. In the Netherlands, visa-related scam cases have skyrocketed from just 12 in 2024, totalling 4,000 euros, to 189 cases so far in 2025, with damages exceeding 32,000 eyuros. Belgium’s federal economy ministry has also reported numerous complaints about online ETA scams, confirming it as a “known practice.”
The trend is not isolated. The European Border and Coast Guard Agency has already identified over 100 fake or unofficial websites offering to sell ETAs, with the number continuing to grow.
How the scams operate
Fraudsters are creating convincing websites designed to steal personal data, charge inflated fees, or process no legitimate application at all. While the official UK ETA costs £16 (around 19 euros), some scam operators charge as much as 178 euros.
Common tactics include:
- Fake websites that collect payments and passport details without submitting a genuine application
- Overcharging schemes that process real applications but at grossly inflated rates
- Phishing operations aimed at harvesting credit card details, often followed by unauthorised charges
ETIAS fraud before launch
Scammers are also exploiting confusion over ETIAS, which will apply to UK citizens travelling to Europe but is not due to launch until late 2026. Fraudulent websites are already offering “early access” to the system – all of which are illegitimate, as the platform does not yet exist.
These sites often mirror official government pages and use urgent messaging to pressure travellers into applying for something unnecessary at this stage.
How to spot a fake
Experts recommend watching for:
- Sponsored search results at the top of Google listings
- Excessive fees beyond official government rates
- Urgent or fear-based language such as “apply now before it’s too late”
- Missing “.gov” or country-specific government domains in URLs
- Requests for unusual payment methods like bank transfers or cryptocurrency
Best practices for travellers and corporate bookers
The safest way to apply for an ETA or, eventually, ETIAS is to go directly to the official government website. Bookmarking verified sites in advance helps avoid the risk of clicking on sponsored ads from fraudulent operators.
For those seeking assistance, reputable physical travel agencies offer added security, though additional service fees may apply.
What to do if scammed
If a scam is suspected, immediate action is vital.
- For company credit cards: notify the finance team to block the card and contact the bank to reverse charges
- For personal cards: contact your bank or credit card provider to report unauthorised transactions
- File a police report and alert consumer protection agencies
- Seek advice from local authorities if passport information has been compromised
Staying ahead of the threat
As Malik stresses, preparation and scepticism remain the strongest defence. Travellers should confirm entry requirements through embassies, consulates, or official government portals and cross-check details across multiple sources.
“The travel authorisation landscape will continue to evolve, and with it, the opportunities for scammers,” Malik said. “Staying informed, using only official channels, and verifying before you click are the best ways to protect both money and personal data.”
Tags: KnowBe4, Javvad Malik, UK’s Electronic Travel Authorisation (ETA)
