The United States Department of Homeland Security (DHS) has proposed a major expansion of its security and identity-verification procedures for international visitors arriving under the Visa Waiver Programme (VWP).
The new rule, published ahead of its listing in the Federal Register, would mandate that all travellers applying through the Electronic System for Travel Authorisation (ESTA) submit five years of their social media activity, ten years of past email addresses, and subject themselves to widened biometric demands, including DNA samples and iris scans.
U.S. Customs and Border Protection (CBP) stated the enhanced requirements are aimed at strengthening identity checks, curbing fraudulent applications, and identifying potential security threats among the 14 million yearly applicants from 40 participating countries. The development was announced by the DHS on Wednesday.
The proposed requirements mark a significant shift from existing regulations, under which providing social media details is optional for ESTA applicants. The new data element would make the submission of social media accounts from the last five years compulsory for all individuals seeking visa-free entry.
Beyond digital footprint data, the proposal dramatically widens the scope of personal information required. Applicants would also be required to submit phone numbers used over the last five years, past IP addresses, photo metadata, and extensive family information.
"These enhanced requirements are essential for strengthening identity checks, curbing fraudulent applications, and identifying potential security threats before they cross our borders," a spokesperson for U.S. Customs and Border Protection said in a statement defending the proposal.
"The ultimate goal is to improve border security and update federal biographic-data standards," the spokesperson added.
Biometric demands would further widen to include advanced scanning and sample collection.
The DHS is proposing the inclusion of facial recognition, fingerprints, iris scans, and DNA samples as part of the screening process for visa-free travellers.
The Visa Waiver Programme allows citizens of 40 countries to travel to the United States for tourism or business for up to 90 days without obtaining a traditional visa. Instead, these travellers must secure authorisation through the ESTA system.
Under previous regulations, ESTA applicants were only optionally asked to provide social media details. This latest proposal, which makes the submission compulsory, marks a major step in the agency’s shift toward more comprehensive digital vetting. The DHS maintained that the new measures were designed to improve border security and update federal biographic-data standards.
The DHS announced the development on Wednesday and has opened a 60-day window for public comments on the proposed rule. This period allows interested parties and international governments to formally submit their concerns or support regarding the measures.
Furthermore, officials confirmed the proposed rule aligns with Executive Order 14161, which was signed in January 2025. "The move aligns directly with Executive Order 14161, which explicitly calls for more rigorous screening procedures to flag foreign security risks," an unnamed Department of Homeland Security official clarified.
Another major change planned is a shift from the current web-based ESTA portal to a mobile-only application system.
If approved, the new policy would represent one of the most sweeping expansions of digital identity verification in U.S. immigration history, profoundly affecting millions of international travellers. The final decision on the proposal will follow a review of the public comments, after which the DHS may adopt the rule, modify it, or withdraw it, setting the future standard for entry into the United States for its closest allies.
