Electronic System for Travel Authorization

Automated system for United States travel eligibility

The Electronic System for Travel Authorization (ESTA) is an automated system that determines the eligibility of visitors to travel to the United States under the Visa Waiver Program (VWP). ESTA was mandated by the Implementing Recommendations of the 9/11 Commission Act of 2007. ESTA only authorizes travel to a U. S. airport, border, or port of entry, but admissibility into the United States is determined by a U. S. Customs and Border Protection (CBP) officer upon arrival. The ESTA application collects biographic information and answers to VWP eligibility questions. ESTA applications may be made at any time, but travelers are encouraged to apply at least 72 hours prior to travel. ESTA has an application fee of $4, and if approved, an additional fee of $17 is charged, for a total of $21. ESTA is also needed for travel under the VWP to the U. S. territories of Puerto Rico, U. S. Virgin Islands, Guam and the Northern Mariana Islands, but some of these territories have separate waivers for certain nationalities that do not require ESTA.

Travelers were able to apply for ESTA in August 2008, and the authorization became mandatory for travel by air or sea from January 12, 2009. Since January 20, 2010, airlines may be fined if they do not require ESTA from passengers traveling under the VWP. Initially ESTA was available for free from the U. S. Customs and Border Protection (CBP) website. On September 8, 2010, following the Travel Promotion Act, CBP began charging a fee of $4 to cover administrative costs, and if the application was approved, an additional fee of $10 to fund the Corporation for Travel Promotion (also known as Brand USA), for a total of $14 for each approved ESTA. On May 26, 2022, the second fee was increased to $17, for a total of $21 for each approved ESTA. but later planned to also require an electronic travel authorization named ETIAS for a fee of €7. ESTA became required also for entry by land from October 1, 2022. On July 6, 2023, the validity of new ESTA applications from nationals of Brunei became limited to one year. On August 1, 2023, the validity of new ESTA applications from nationals of Hungary became limited to one year and to a single use. Visitors under the VWP may stay in the United States for 90 days, which also includes the time spent in Canada, Mexico, Bermuda, or the islands in the Caribbean if the arrival was through the United States. Due to the Visa Waiver Program Improvement and Terrorist Travel Prevention Act of 2015, those who have been in Iran, Iraq, Libya, North Korea, Somalia, Sudan, Syria or Yemen on or after March 1, 2011, or in Cuba on or after January 12, 2021, or who are dual nationals of Cuba, Iran, Iraq, North Korea, Sudan or Syria, are not eligible to travel under the VWP. In any case, those ineligible for the VWP may still apply for a regular visa from a U. S. embassy or consulate.

In December 2018, CBP announced that instant ESTA approvals would no longer be available and reiterated that it "strongly encouraged" travelers to submit an online authorization request at least three days (72 hours) before traveling to the United States. However, CBP's website still says that "In most cases, a response is received within seconds of submitting an application." Each travel authorization under ESTA can be valid for up to two years, for multiple trips during that period. However, travelers must obtain a new ESTA authorization if they are issued a new passport, or change their name, gender or country of nationality, or if any answer to their ESTA application eligibility questions changes. Third party websites try to make themselves look legitimate by using official sounding web addresses and posting logos that resemble the U. S. government emblem. They may or may not contain a small disclaimer at the bottom of the page that says they are not associated with the U. S. government. Even if one of the third party websites is used, passengers themselves still have to complete the same form. Concerns have been raised that third party sites could be used for identity theft, credit card fraud, or the distribution of malware.