US Visa Waiver Program Updates: New ESTA Rules and Biometrics

The United States is implementing sweeping changes to its Visa Waiver Program (VWP), focusing on advanced digital vetting and biometric verification to safeguard national borders. These reforms target the Electronic System for Travel Authorization (ESTA), requiring applicants from 41 participating nations to submit far more personal data via a new mobile app.

Understanding the Visa Waiver Program Basics

The VWP allows citizens of designated countries to enter the US for tourism or business stays up to 90 days without a traditional visa, provided they obtain ESTA approval beforehand. This pre-screening system checks eligibility and screens for security risks before travel. Participants must hold e-passports with embedded chips compliant with International Civil Aviation Organization standards, identifiable by a symbol on the cover.

Eligibility hinges on strict criteria for joining countries, including low visa refusal rates under 3%, robust data-sharing on law enforcement and security, timely reporting of lost passports, and high standards in counterterrorism and border control. However, certain travelers—like those with dual nationality from restricted areas or recent visits to high-risk countries—are barred and must apply for a full visa.

Core Drivers Behind the Security Enhancements

These updates stem from ongoing efforts to counter evolving threats, including terrorism and identity fraud. Presidential Proclamation 10998, effective January 1, 2026, suspended visa issuance for nationals from 19 countries with chronic vetting gaps, such as Afghanistan, Iran, and Yemen, expanding prior restrictions to protect public safety. The policy emphasizes rigorous screening to prevent exploitation of entry systems.

U.S. Customs and Border Protection (CBP) views the changes as essential for collecting comprehensive data upfront, reducing approval delays from incomplete submissions, and aligning with mobile technology trends for efficiency.

New ESTA Application Requirements

CBP’s proposal, published in the Federal Register on December 10, 2025, shifts ESTA to a mobile-only platform, phasing out web submissions for applications while keeping the site for information. Public comments were open until February 9, 2026.

• Mandatory Facial Photo: Applicants must upload a selfie alongside their passport’s biographic page to verify identity.
• Social Media History: A five-year record of platforms, usernames, and activity to aid vetting.
• Expanded Contact Data: Phone numbers and emails from the past five to ten years, plus business equivalents.
• Family Information: Details on relatives, including names, birthplaces, dates of birth, phone numbers, and residences.
• Advanced Biometrics: Potential inclusion of fingerprints, iris scans, or DNA, beyond just photos.
• Tech Metadata: IP addresses and photo metadata from submissions.

These fields aim to create a fuller profile for risk assessment, integrated into systems like the Arrival and Departure Information System (ADIS).

Mobile App Innovations for Travelers

The ESTA mobile app introduces voluntary departure reporting for those needing Form I-94 records. Users can submit biographic data, a live facial image with liveness detection, and geolocation to confirm exit from the US, improving travel history accuracy without penalizing non-participants.

Geolocation verifies the user is abroad, while biometric checks link the departure to the arrival record in ADIS, helping maintain lawful status.

Implications for VWP Travelers

Travelers should prepare by gathering documents early, as processing might involve deeper reviews. Approval isn’t guaranteed and doesn’t ensure entry—CBP officers make final calls at ports.

Who Stays Eligible and Who Doesn’t

VWP remains open to most from 41 countries, but exclusions apply under the 2015 Visa Waiver Program Improvement and Terrorist Travel Prevention Act. Dual nationals from Iran, Iraq, Syria, Sudan, or restricted zones, or those visiting them post-March 2011, need visas.

Recent proclamations add layers: full visa suspensions for 19 nations heighten scrutiny for similar profiles.

Preparing for ESTA Under New Rules

1. Download the ESTA app upon release and create an account.
2. Scan your e-passport and take a clear facial photo in good lighting.
3. Compile social media, contact, and family data spanning required years.
4. Apply at least 72 hours before travel; fees remain $21.
5. Monitor status via the app; validity extends up to two years or passport expiry.

Non-compliance risks denial, so accuracy is paramount.

Global Context and Country Requirements

Nations seeking VWP inclusion must sustain low refusal rates, share security data, and issue secure e-passports. The US prioritizes partners with proven track records in combating threats.

Frequently Asked Questions (FAQs)

What is ESTA and who needs it?

ESTA is mandatory pre-approval for VWP travelers entering by air or sea for up to 90 days.

Will the website still work for applications?

No—applications shift to mobile app only; website becomes informational.

Is the departure reporting feature required?

No, it’s voluntary and doesn’t affect status if skipped.

What if my ESTA is denied?

Apply for a B-1/B-2 visa at a US embassy.

Do these changes apply to land borders?

ESTA is for air/sea; land entries have separate rules.

How does social media factor in?

Five-year history helps vet for security risks.

Broader Impacts on International Travel

These measures reflect a global trend toward biometric borders, balancing convenience with security. Travelers benefit from faster processing if data is complete, but privacy concerns arise over extensive personal info collection. VWP participation underscores mutual trust between the US and allies in sharing threat intelligence.

While aimed at threats, the rules ensure legitimate visitors face minimal hurdles. Staying informed via official channels like CBP and State Department sites is crucial as the app rolls out.