The PNG eVisa scam uses fake clone websites, phishing emails, and unauthorised agencies to steal money and passport data from UK travellers. The only government-operated application portal is evisa.ica.gov.pg, run by Papua New Guinea’s Immigration and Citizenship Authority (ICA).
Scammers exploit low awareness of the .gov.pg domain by creating deceptive clone sites using urgency tactics, wire-transfer demands, and fake post-submission emails requesting extra processing fees.
What Is the PNG eVisa Scam and Where to Apply Safely
The PNG eVisa scam uses fake clone websites, phishing emails, and unauthorised agencies to steal money and passport data. The three primary vectors are: clone sites, deceptive agencies, and unsolicited contact via email, WhatsApp, or Facebook Messenger.
Scammers target Papua New Guinea because UK travellers have low awareness of the .gov.pg domain. The only legitimate portal is evisa.ica.gov.pg.
Create an account
on the evisa.ica.gov.pg portal.
Complete the digital application form
Upload required documents: passport valid 6+ months from entry, COVID-19 vaccination certificate or proof of antibodies, recent bank statement, and travel itinerary.
Pay the visa fee
via the portal’s secure payment gateway.
Receive a confirmation email
containing your reference number upon approval.
Available visa types include the Easy Visitor Permit (30 or 60 days, single entry) and Business Short-term visas (Single Entry, 30 days; or Multiple Entry, 12 months with max 60 days per arrival). PNG’s ICA has issued a Facebook warning stating that anyone applying through a third-party website is not guaranteed entry into PNG nor a refund of payments.
Warning Signs and Technical Checklist for Fake PNG eVisa Sites
Red flags include non-.gov.pg domains, inflated fees, urgency tactics, generic email addresses, and wire-transfer or crypto payment demands. A 6-step checklist exposes most PNG eVisa scam clone sites.
- ⚠️ URL not ending in .gov.pg
- ⚠️ No HTTPS padlock; the site is insecure
- ⚠️ Poor grammar or spelling on the application form
- ⚠️ Fees substantially above the government’s published rate
- ⚠️ Aggressive urgency (“pay within 24h”)
- ⚠️ Generic Gmail/Yahoo contact addresses
- ⚠️ Payment via wire transfer or cryptocurrency; gov.uk explicitly prohibits money transfer for visa payments
URL anatomy
Confirm the exact domain is evisa.ica.gov.pg. The .gov.pg TLD is PNG’s sovereign domain; any .com, .net, or .org variant is fake.
SSL certificate
Click the padlock and verify the holder is a PNG government entity, not a foreign entity.
WHOIS domain age
Government domains are years old; scam clones are typically weeks or months old.
Contact cross-reference
Verify any listed phone number or email against ica.gov.pg.
Visual cloning
Look for misused ICA logos, stock imagery, and broken footer links.
Search-engine check
Google results may display a government label and the country’s flag beside the URL. Check Google Safe Browsing status.
| Legitimate domain | Fake patterns to avoid |
|---|---|
| evisa.ica.gov.pg | ,, |
Third-Party Agencies and Post-Submission Phishing Emails
Third-party agencies charge a premium but cannot guarantee approval. Only PNG ICA decides. Post-submission phishing emails demand fake “stamp duties”; genuine notices come only from @ica.gov.pg.
Not all agencies are fraudulent. Some assist travellers with complex itineraries or language barriers. Commercial sites typically charge 2-4× the government rate. Verify agencies via the OMARA MARN registry, PNG ICA authorisation, and business registration. Red flags: no verifiable MARN, WhatsApp or Facebook Messenger solicitation, refusal to share the evisa.ica.gov.pg portal, guaranteed approval.
After applying, scammers send follow-up emails demanding ‘processing fees’, ‘stamp duties’, or ‘insurance charges’. Only @ica.gov.pg sends genuine notices. Always log into evisa.ica.gov.pg directly; never click links in unsolicited emails.
Protection visa fraud carries severe consequences: fake applications are processed fast and quickly refused, staying on your immigration record for life, with large fines, jail time, and making future visits to other countries harder.
| Legitimate | Fake |
|---|---|
| Sender: @ica.gov.pg | Sender: unrelated domain |
| Neutral tone | Urgent “pay within 48 hours” |
| Links to evisa.ica.gov.pg | Links to unrelated domains |
| No extra fee requests | Demand for “stamp duty” |
| Valid reference number | Inconsistent or missing number |
Lost Money or Data? How to Report and Recover from the UK
UK victims of a PNG eVisa scam should initiate a Visa/Mastercard chargeback within 120 days, report to Action Fraud, and contact PNG ICA immediately to flag compromised passport data.
- Chargeback: Contact your bank’s fraud department within the 120-day chargeback window. Visa reason code 13.1 (“Not as described”) or Mastercard code 4837 may apply. Supply screenshots of the fake site, the payment receipt, and all email correspondence.
- UK reporting: File a report with Action Fraud at. Forward scam emails to the gov.uk Report Fraud service. For broader travel-safety guidance, check the UK Foreign Office travel advice for Papua New Guinea at gov.uk/foreign-travel-advice/papua-new-guinea.
- PNG & international reporting: Contact PNG ICA via ica.gov.pg. The Australian High Commission is located at Godwit Road, Waigani NCD, Port Moresby (Tel: +675 7090 0100), with a Consulate-General in Lae. Border Watch offers anonymous scam reporting; eConsumer.gov accepts international complaints.
- Identity-theft emergency (48-hour timeline): Hour 0-1: change all linked passwords. Hour 1-6: contact HM Passport Office. Hour 6-24: place fraud alerts with Experian, Equifax, and TransUnion. Hour 24-48: report to the ICO and notify PNG ICA of the compromised PNG eVisa application.
- Airport contingency: Arriving at Jacksons International Airport (POM) with an invalid PNG eVisa may result in detention, denied entry, fines, or future entry restrictions.
Published: 14 September 2026 | Last updated: 14 September 2026. Fees and links verified against ica.gov.pg and gov.uk.
Sources: PNG ICA (ica.gov.pg), UK Gov Fraud Prevention (gov.uk), Action Fraud , Australian High Commission PNG, Visa/Mastercard chargeback codes, OMARA MARN registry, eConsumer.gov.
Frequently Asked Questions (FAQ)
How do I know if my PNG eVisa application site is legitimate?
Check that the URL is exactly evisa.ica.gov.pg, verify the SSL certificate holder is a PNG government entity, and confirm the domain age via WHOIS. Any.com,.net, or.org variant is not a government site.
