ESTA Travel Scam Websites: How Copycat Sites Overcharge Travelers

TLDR

The FTC issued a March 2026 alert warning travelers about copycat ESTA websites that charge $60 to $200+ for a government application that costs $21 on the official site. ScamVerify™ has identified dozens of these copycat sites that mimic official government branding, rank in paid search results, and may not even submit the application at all. The only official ESTA website is esta.cbp.dhs.gov.

What Is ESTA and Why Scammers Target It

The Electronic System for Travel Authorization (ESTA) is required for citizens of 41 Visa Waiver Program countries traveling to the United States. The application takes about 20 minutes, costs $21, and is valid for two years. It is processed exclusively through the U.S. Customs and Border Protection (CBP) website.

Scammers target ESTA for three reasons:

1. International travelers are unfamiliar with U.S. government website conventions
2. The official site is not intuitive to find since the URL (esta.cbp.dhs.gov) is a subdomain buried under three levels of government hierarchy
3. Spring and summer travel season creates a surge of first-time applicants searching for "ESTA application" online

How Copycat ESTA Sites Operate

The Pricing Trap

Copycat sites position themselves as "authorized ESTA processing services" or "official ESTA application portals." They collect the same information as the real application, including passport numbers, travel details, and employment history, then either submit the application to the real CBP site while pocketing the markup or simply steal the data.

How They Get Traffic

Copycat ESTA sites use three primary channels to reach victims:

• Paid search ads for terms like "ESTA application," "ESTA USA," and "travel authorization US." Google and Bing ads appear above organic results, and many travelers click the first link without checking
• SEO-optimized content with travel guides, FAQ pages, and blog posts that rank organically for ESTA-related searches
• Social media ads targeting travelers in Visa Waiver Program countries, often timed to peak travel booking seasons

Red Flags on Copycat Sites

Look for these warning signs, many of which overlap with general fake website red flags:

• Price above $21. The official ESTA fee is exactly $21. Any site charging more is either a middleman or a scam.
• No .gov domain. The official site is esta.cbp.dhs.gov. Any other domain, regardless of how official it looks, is not the government.
• "Expedited processing" claims. CBP processes all ESTA applications on the same timeline. There is no paid fast-track option.
• Urgency language. Phrases like "apply now before your trip" or "processing times increasing" are pressure tactics.
• Vague company information. Legitimate third-party services disclose their company name, address, and the fact that they are not affiliated with the government. Scam sites hide or fabricate this information.

Other Travel Document Scams

ESTA is not the only travel document targeted by copycat sites. The same playbook applies to:

The FTC has warned that copycat sites for passport renewals and Global Entry applications have increased significantly since 2024, following the same model as ESTA scams.

How to Find the Real ESTA Site

Follow these steps to ensure you are on the official ESTA website:

1. Type the URL directly: esta.cbp.dhs.gov. Do not search for it.
2. Verify the domain ends in .gov. This is the single most reliable indicator of a legitimate government site.
3. Check the price. If it is not $21, you are not on the official site.
4. Look for the CBP logo and U.S. Department of Homeland Security branding. While scammers can copy these, their absence is a definitive red flag.
5. Run any suspicious URL through ScamVerify's website checker before entering personal information.

For more tips on verifying websites, our guide on how to check if a website is safe covers domain verification, WHOIS lookups, and SSL analysis.

What to Do If You Used a Copycat Site

If you already paid a copycat ESTA site:

1. Check your ESTA status on the official site (esta.cbp.dhs.gov) using your passport number. If your ESTA was actually submitted, it will appear there.
2. Dispute the charge with your credit card company if you were overcharged or if the application was never submitted.
3. Monitor your credit since you shared sensitive personal data including your passport number.
4. Report the site to the FTC at ReportFraud.ftc.gov.
5. Report the ad to Google or Bing if you found the site through a search ad.

FAQ

Is there a legitimate third-party ESTA service?

Some travel agencies and visa processing services do offer legitimate ESTA filing assistance for a fee. The difference is that legitimate services clearly disclose they are not the government, state their exact service fee separately from the $21 government fee, and provide actual customer support. However, the ESTA application is straightforward enough that most travelers do not need third-party help.

Can I get a refund from a copycat ESTA site?

Contact your credit card company to initiate a chargeback. Under Fair Credit Billing Act protections, you can dispute charges for services that were misrepresented. Document the price difference between what you paid and the official $21 fee, and note any misleading claims the site made about being "official" or "authorized."

How quickly is a real ESTA processed?

Most ESTA applications are approved within minutes. CBP states that applications may take up to 72 hours. There is no expedited processing option, so any site claiming to offer faster processing is misleading you.

Do I need ESTA if I have a visa?

No. ESTA is only for travelers from Visa Waiver Program countries who do not have a U.S. visa. If you already have a valid U.S. visa, you do not need ESTA. Scam sites sometimes target visa holders with unnecessary ESTA applications.