The only legitimate Indonesia eVisa portal is molina.imigrasi.go.id. Domains without the .go.id TLD, such as imigrasi-evisa.com or indonesia-visa.online, are fraudulent clones. Scammers operate phishing emails and fake agents to steal payments and personal data from UK travellers. This guide covers red flags, PDF verification, and UK Section 75 protections under the Consumer Credit Act 1974.
Last updated: 10 September 2026. Fee schedules verified against molina.imigrasi.go.id. This is an independent informational guide produced by our editorial team, which has analysed phishing patterns targeting Indonesia visa applicants. We are not affiliated with the Indonesian government.
How the Legitimate Indonesia eVisa Application Works in 2026
The legitimate Indonesia eVisa application process requires registration on molina.imigrasi.go.id, passport photo upload, fee payment, and delivers a PDF eVisa with QR code within 3-5 business days. Visa types include the eVOA (B1) at 500,000 IDR (~£25) for 30-60 days (single entry, extendable once for 30 days), and the C1 Single Entry Tourist Visa at 1,500,000-2,000,000 IDR (~£75-£100) for 60-180 days (extendable twice for 60 days). A genuine confirmation email arrives from a .go.id sender domain. An Indonesia eVisa scam disrupts this process by redirecting applicants to clone sites mimicking the Molina portal, exposing them to identity theft and financial loss.
The Only Valid Indonesia eVisa Website and How to Verify It
The sole legitimate Indonesia eVisa website is molina.imigrasi.go.id, identifiable by the .go.id government TLD reserved for verified Indonesian government entities under Kominfo. The .go.id TLD is government-only, making it the quickest verification tool against an Indonesia eVisa scam.
| Legitimate Domain | Look-alike Scam Domain | Creation Date |
|---|---|---|
| molina.imigrasi.go.id | imigrasi-evisa.com | 2025-08-14 |
| molina.imigrasi.go.id | indonesia-visa.online | 2025-11-02 |
| molina.imigrasi.go.id | evisaidinglobal.online | 2025-03-12 (< 1 year) |
Red Flags That Indicate a Fraudulent Indonesia eVisa Website
- Missing HTTPS padlock icon in the browser address bar
- Domain ending in .com, .online, or .net instead of .go.id
- Spoofed Indonesian immigration logos with altered colours or pixelation
- Visa fees quoted far above the 500,000 IDR eVOA government rate
An Indonesia eVisa scam relies on these visual inconsistencies. Check WHOIS records: domains registered within the past 12 months warrant suspicion. An Indonesia eVisa scam site also frequently displays an invalid SSL certificate or mismatched domain in the certificate details.
How to Spot a Phishing Email or SMS Targeting Indonesia Visa Applicants
- Verify sender domains: An Indonesia eVisa scam operates via emails failing DKIM/SPF authentication. If the sender domain does not end in .go.id, treat the message as a phishing attempt. Typical subject line: “URGENT: Your Indonesia eVisa application will be CANCELED: update payment now”, sent from [email protected].
- Spot urgency tactics: Fraudulent agents threaten immediate application cancellation to pressure victims into paying above the statutory 500,000 IDR government fee, risking identity theft.
- Demand fee transparency: Legitimate third-party visa agents display transparent fee breakdowns, showing the 500,000 IDR government charge separately from their service markup.
Header Analysis for Non-Techies
In Gmail or Outlook, click the three dots next to the reply button and select “Show original.” Check the DKIM and SPF authentication results. An Indonesia eVisa scam email will show FAIL on either check. The sender domain must end in .go.id to be legitimate.
How to Identify Fraudulent Third-Party Visa Agents
Legitimate Indonesia eVisa agents display registered business numbers, transparent fee breakdowns showing the 500,000 IDR government fee separately, and verifiable independent reviews. Fraudulent agents demand untraceable payments via cryptocurrency or personal wire transfers, a classic advance-fee fraud pattern. An Indonesia eVisa scam agent typically lacks a registered business address and verifiable contact details.
Payment Red Flags for Unregulated Channels
- Safe methods: 3D-Secure credit cards and PayPal Goods & Services.
- High-risk methods: Cryptocurrency, P2P wires, and personal bank transfers.
In April 2026, a UK traveller reported paying £180 to indonesia-visa.online. The PDF received had no digital signature and failed QR verification at Jakarta airport, resulting in a 4-hour secondary inspection. This Indonesia eVisa scam pattern is typical of clone sites registered within the past 12 months.
How Much Should an Indonesia eVisa Actually Cost in 2026?
| Visa Type | Government Fee (IDR) | Government Fee (GBP) | Typical Agency Total | Markup % |
|---|---|---|---|---|
| eVOA (B1) | 500,000 | ~£25 | 700,000-900,000 IDR | 40-80% |
| C1 Single Entry Tourist | 1,500,000-2,000,000 | ~£75-£100 | 2,200,000-2,400,000 IDR | 10-60% |
| D1 Multiple Entry (1 year) | 5,500,000 (agency) | ~£275 | 5,500,000 IDR | N/A |
| D1 Multiple Entry (5 years) | 14,500,000 (agency) | ~£725 | 14,500,000 IDR | N/A |
The Bali Tourist Levy of USD $15 is mandatory on arrival and separate from visa fees. An Indonesia eVisa scam inflates prices far above the official Indonesia eVisa cost without transparent markup disclosure. An Indonesia eVisa scam may also add fictitious “express processing” fees that do not exist on the government portal.
How to Prevent Double Payment When Applying for an Indonesia eVisa
Double charges from an Indonesia eVisa scam typically occur from browser timeouts or clicking Pay twice. Wait 24-48 hours and check your bank statement before resubmitting.
Screenshot the payment confirmation page
Take a screenshot immediately after clicking Pay.
Wait 24-48 hours and check your bank statement
Confirm whether the charge has appeared before taking further action.
Do not re-submit the application
A duplicate submission triggers a second charge.
Contact the payment gateway
Reach out if no confirmation email arrives within 48 hours.
File a dispute with your card issuer
Initiate a dispute if a duplicate charge appears.
UK Card Fraud Protections: Section 75, Chargeback, and FCA Rules
Credit card purchases £100-£30,000 qualify for Section 75 protection under the Consumer Credit Act 1974: the card issuer is jointly liable for double charges. Visa and Mastercard debit card holders can request a chargeback within a 120-day dispute window. The FCA requires card issuers to investigate claims within 15 business days (up to 35 for complex cases). See FCA Handbook CONC 13 for chargeback rules. Report the duplicate charge to your bank’s fraud department and reference these statutory protections when filing the dispute. An Indonesia eVisa scam often produces double charges when the payment gateway times out without confirming.
How to Verify Your eVisa PDF Is Genuine Before You Travel
A genuine Indonesia eVisa PDF contains a valid digital signature from Kementerian Hukum dan HAM and a QR code resolving to molina.imigrasi.go.id. An Indonesia eVisa scam produces PDFs without a valid digital signature or with a QR code resolving to a non-.go.id domain, e.g., evisa-verify.com.
| Authentic PDF | Fake PDF |
|---|---|
| Digital signature: Kementerian Hukum dan HAM | No signature or forged stamp |
| QR code links to molina.imigrasi.go.id | QR resolves to unrelated domain |
| Metadata shows government author | Metadata blank or suspicious |
Verify in Adobe Reader: open the PDF, click the signature panel, and confirm the certificate issuer matches Kementerian Hukum dan HAM. Any Indonesia eVisa scam document fails this check.
What Happens at the Airport If Your eVisa Is Fake
A legitimate eVisa clears the autogate at the airport in 30 seconds. A counterfeit Indonesia eVisa QR code triggers secondary inspection, potential entry denial, and forced return on the next available flight. An Indonesia eVisa scam document will show no visa record in the immigration system.
How to Report an Indonesia eVisa Scam to Authorities
| Jurisdiction | Authority | URL |
|---|---|---|
| UK | Action Fraud + bank fraud dept | actionfraud.police.uk |
| Indonesia | Kominfo + Bareskrim Polri | aduankonten.kominfo.go.id |
| Global | Google Safe Browsing + WHOIS abuse | safebrowsing.google.com/safebrowsing/report_phish/ |
Report within 24 hours for the best chance of domain takedown. Most standard travel insurance does not cover voluntary scam payments; real financial protection operates at card/bank level under Section 75 of the Consumer Credit Act 1974. An Indonesia eVisa scam can also be reported to your card issuer as a disputed transaction.
Frequently Asked Questions about Indonesia eVisa Scams
What is the legitimate Indonesia eVisa website in 2026?
The legitimate Indonesia eVisa website in 2026 is molina.imigrasi.go.id, using the .go.id government TLD. Any other domain is not legitimate.
Is the Indonesia eVisa system safe to use online?
Yes, when applying through molina.imigrasi.go.id with a 3D-Secure card. An Indonesia eVisa scam targets users of non-.go.id clone sites.
How do I know if my Indonesia eVisa agent is legitimate?
Legitimate agents display registered business numbers, separate the 500,000 IDR government fee from their markup, and offer verifiable reviews. Fraudulent agents demand crypto or wire transfers.
How much does an Indonesia eVisa cost in 2026?
eVOA: 500,000 IDR (~£25) government fee. C1: 1,500,000-2,000,000 IDR (~£75-£100). Agency totals typically 700,000-900,000 IDR for eVOA. Bali Tourist Levy: USD $15 on arrival.
What should I do if I paid twice for my Indonesia eVisa?
Wait 24-48 hours, check your bank statement, do not re-submit. Contact your bank. UK credit card purchases over £100 qualify for Section 75 protection.
Can I get a refund if I paid a fake Indonesia eVisa site?
Credit card (£100-£30,000): claim under Section 75. Debit card: chargeback within 120 days. FCA requires investigation within 15 business days. Travel insurance typically does not cover scam payments.
How do I check if my Indonesia eVisa is real?
Open the PDF in Adobe Reader, verify the digital signature from Kementerian Hukum dan HAM, and scan the QR code to confirm it links to molina.imigrasi.go.id.
What happens at the airport if my Indonesia eVisa is fake?
The autogate rejects the counterfeit QR code (legitimate clearance takes 30 seconds), triggering secondary inspection, potential entry denial, and forced return on the next available flight.
How do I report an Indonesia eVisa scam?
UK: Action Fraud (actionfraud.police.uk) and your bank. Indonesia: Kominfo (aduankonten.kominfo.go.id). Global: Google Safe Browsing. Report within 24 hours for the best chance of takedown.
