On 13 October 2026, the British travel association ABTA warned holidaymakers not to apply for the European Union’s new ETIAS travel authorisation, even though more than 150 websites already claim to sell it. The warning, reported in the British press the same day, captures the confusion facing British travellers to France after Brexit: a document that does not yet exist is already being sold online, sometimes at prices far above the future official fee, by copycat websites, while the real rules on who may cross the French border, and how to challenge a refusal, remain poorly understood. The European Union’s own official ETIAS site confirms the starting point, explaining that the system is currently not in operation and that no applications for travel authorisations are being collected. Anyone who pays a website today for an ETIAS authorisation is therefore paying for nothing, and possibly handing passport and payment details to criminals.
This article explains, for British passport holders travelling to France, what the ETIAS authorisation (autorisation de voyage, the travel permit) will and will not do once it goes live, how to recognise the copycat sites and recover money already paid, what happens at the French border if an authorisation is refused or missing, and which French courts can overturn a refusal of entry (refus d’entree, the decision by which border police deny admission). British residents of France who hold a Withdrawal Agreement residence document are in a different position from visitors, and that distinction runs through the whole analysis. Where French law applies, the exact provisions are cited and linked so that every decisive statement can be checked.
I. The ETIAS authorisation and the copycat website trap
A. Will British travellers to France need an ETIAS authorisation, and when
ETIAS, the European Travel Information and Authorisation System, is an electronic travel permit for nationals of countries whose citizens do not need a visa for short stays in the Schengen area, which since Brexit includes British citizens visiting France for holidays, family visits or short business trips. The official EU site states the general rule plainly: as a general matter, an authorisation will be needed by travellers who are not EU nationals and who are citizens of a country whose nationals are exempt from the short-stay visa requirement in the European countries operating ETIAS. That description covers the standard British visitor to France, who currently travels visa-free for stays of up to 90 days in any 180-day period.
Three qualifications matter enormously, and each is a source of costly mistakes. First, ETIAS is not a visa and does not authorise work or long-term study: the official site makes clear that the authorisation gives no right to take up long-term study or employment, and that a longer stay will most likely require a long-term visa. British citizens moving to France to live, work or retire therefore remain subject to the French long-stay visa (visa de long sejour) system, under which “Tout étranger souhaitant entrer en France en vue d’y séjourner pour une durée supérieure à trois mois doit solliciter auprès des autorités diplomatiques et consulaires françaises un visa de long séjour dont la durée de validité ne peut être supérieure à un an”, as article L312-2 of the CESEDA (the Code de l’entree et du sejour des etrangers et du droit d’asile, the French code governing entry, residence and asylum) provides. Readers planning a move rather than a trip should consult our guide to long-stay visas and residence permits for British newcomers instead of relying on anything written about ETIAS.
Second, British citizens who are lawfully resident in France under the EU-UK Withdrawal Agreement do not need ETIAS at all. The official site expressly excludes holders of residence permits issued under the standard EU residence-permit format, explicitly including residence documents issued under the EU-UK Withdrawal Agreement. In practice this means that a Briton holding a Withdrawal Agreement carte de sejour (residence permit) travels on that permit, not on an ETIAS authorisation, and any website telling such a person to buy an ETIAS is misleading them. The same logic exempts holders of residence cards issued under EU free-movement rules.
Third, and most important for today’s travellers: there is nothing to apply for yet. The official site stresses that the Union will announce the precise launch date several months before entry into service, and ABTA’s public-affairs director said on 13 October 2026 that the scheme, once expected this year, is back on hold and should not be introduced until the parallel biometric system is fully operational and working properly. That parallel system is EES, the Entry-Exit System of biometric checks operating at French border points, which is the subject of our companion guide for British travellers facing EES checks and refused entry. Until a launch date is announced, the only correct advice is ABTA’s: travellers can and should refrain from applying now, because no application channel exists.
When the system does go live, the economics are fixed and public, which is precisely what makes the current scam sites detectable. Applying directly is to cost a flat EUR 20 fee, with any surcharge going to the intermediary rather than to the authorities, and travellers under 18 and over 70 are to be exempt from the fee itself. Applications will be lodged through the official ETIAS website or the official mobile application, both on the europa.eu domain, and the EU strongly advises travellers to secure the authorisation before buying tickets and booking hotels. Most applications are expected to be processed within minutes, or within 96 hours at the latest, with longer examination of up to 30 additional days where documents or an interview are requested. Any site demanding immediate payment of a much larger sum, or claiming to fast-track an application that officially takes minutes, is by definition not the official channel.
Finally, travellers should understand what the authorisation does not guarantee. A valid ETIAS will allow the holder to board a flight, bus or ferry, but the official site warns that the final decision always rests with the border guards at the crossing point, who may refuse entry on national-law or security grounds. And without a valid authorisation, once the system is live, travellers lacking one are to be refused entry at the border. ETIAS is therefore a necessary but not sufficient condition for admission, and French border law, examined in Part II, keeps the last word.
B. Copycat ETIAS websites: how the fraud works and how to get your money back
The fraud follows a pattern the EU’s border agency Frontex identified well before launch: unofficial sites mimic the layout of the official website, use convincing domain names, give inaccurate information about who needs an authorisation, charge inflated fees and harvest passport numbers, addresses and payment details. Press reporting of 13 October 2026 puts the scale at more than 150 sites, with ABTA warning that victims lose money and put their personal data at risk. Commercial intermediaries are not illegal as such: a travel agency may file an application on a traveller’s behalf, provided both parties sign a formal declaration of representation. The offence begins where the site lies, overcharges through deception or exploits data. Three layers of French law then protect the victim, and they should be used in the right order.
The first layer is criminal. French criminal law defines fraud (escroquerie) in these terms: “L’escroquerie est le fait, soit par l’usage d’un faux nom ou d’une fausse qualité, soit par l’abus d’une qualité vraie, soit par l’emploi de manoeuvres frauduleuses, de tromper une personne physique ou morale et de la déterminer ainsi, à son préjudice ou au préjudice d’un tiers, à remettre des fonds, des valeurs ou un bien quelconque, à fournir un service ou à consentir un acte opérant obligation ou décharge.” The offence is punishable by five years’ imprisonment under article 313-1 of the Penal Code. A site that passes itself off as the official EU application channel, takes payment for an authorisation that cannot currently be issued, or levies a hidden margin while pretending to charge the official EUR 20 fee, fits that definition where deception is proved: false quality, fraudulent manoeuvres and payment obtained by deceit. Victims should file a criminal complaint (plainte) promptly, online via the French pre-complaint system or at any police station or gendarmerie, keeping screenshots, receipts, the URL, the exact sums debited and all emails. The complaint matters twice: it opens the criminal route and it creates dated evidence for the civil and banking routes below. Where the site is established outside France, the complaint can still be filed in France if the victim paid from France or was targeted there, and cooperation mechanisms between EU police forces then apply.
The second layer is consumer law. Article L121-1 of the Consumer Code provides that “Les pratiques commerciales déloyales sont interdites.”, defining an unfair practice as one contrary to professional diligence that distorts, or is likely to distort, the economic behaviour of the normally informed consumer: “Une pratique commerciale est déloyale lorsqu’elle est contraire aux exigences de la diligence professionnelle et qu’elle altère ou est susceptible d’altérer de manière substantielle le comportement économique du consommateur normalement informé et raisonnablement attentif et avisé, à l’égard d’un bien ou d’un service.” Passing off a commercial site as the single official channel, inventing urgency around a scheme officially on hold, or concealing that the EUR 20 official fee is the only mandatory charge are textbook examples of misleading practices. The practical route for a British visitor is the European Consumer Centre network, which handles cross-border disputes between the consumer’s home system and the trader’s, alongside a formal written demand (mise en demeure, the recorded-delivery letter of formal notice) to the site operator seeking a refund within a short deadline. Chargeback through the card network is a parallel option, but it has strict time limits and should be started without waiting for the trader’s answer.
The third layer, and often the fastest, is the victim’s own bank. Where card details were stolen and used without consent, French monetary and financial law is strongly protective: article L133-18 of the Monetary and Financial Code states that “En cas d’opération de paiement non autorisée signalée par l’utilisateur dans les conditions prévues à l’article L. 133-24 , le prestataire de services de paiement du payeur rembourse au payeur le montant de l’opération non autorisée immédiatement après avoir pris connaissance de l’opération ou après en avoir été informé, et en tout état de cause au plus tard à la fin du premier jour ouvrable suivant, sauf s’il a de bonnes raisons de soupçonner une fraude de l’utilisateur du service de paiement et s’il communique ces raisons par écrit à la Banque de France.” The courts apply this strictly: in a published judgment of 26 February 2025 (RG 24/00846), the Riom Court of Appeal overturned a first-instance ruling and ordered a French bank to reimburse more than 21,000 euros of disputed transfers and card payments, with statutory penalties, after finding the operations unauthorised (full judgment on courdecassation.fr). The lesson for scam victims is procedural: notify the bank in writing immediately, oppose the card where details are compromised, meet the thirteen-month notification deadline of article L133-24, and treat any refusal that is not reasoned in writing as contestable.
One careful distinction must be kept. A payment the traveller genuinely authorised, even to a dishonest site, is not an unauthorised operation and follows the refund and chargeback route rather than the automatic-reimbursement route. Conversely, payments the site initiated or inflated without consent fall squarely under article L133-18. Victims should therefore describe facts precisely in each letter: what was clicked, what was agreed, what was debited, and what differs. Finally, anyone who transmitted a passport scan should treat identity theft as a live risk: file the complaint, notify the bank, monitor accounts, and consider replacing the travel document through the standard UK passport process rather than waiting to discover misuse at a border.
II. At the French border and afterwards: refusal, holding and challenge
A. Refused authorisation, refused boarding, refused entry: what French officers may lawfully do
Once ETIAS is operational, three successive filters can stop a British traveller to France: the ETIAS decision itself, the carrier at check-in, and the border guard at the crossing point. Each has its own legal basis, and confusing them leads to challenges filed in the wrong place. The ETIAS refusal, revocation or annulment is an EU procedure, but any appeal is national: the refusal email states the grounds and the deciding authority, and explains which country’s procedure applies, with appeals handled under that country’s national law. A refusal issued by the French ETIAS unit is therefore challenged under French administrative law, while a refusal issued by another Member State follows that State’s procedure, even if the traveller’s destination was France. The notification email is the document on which everything else depends and must be kept.
At the border itself, French officers apply the Schengen Borders Code as relayed by domestic law. Article L311-1 of the CESEDA requires every foreigner entering France to carry the required documents: “Pour entrer en France, tout étranger doit être muni”, followed by the list of visas, supporting documents, means of subsistence, medical cover and return guarantees demanded by the Schengen Borders Code. Article L311-2 then lists the situations in which “Un étranger ne satisfait pas aux conditions d’entrée sur le territoire français”, including threats to public order and alerts in the Schengen Information System. For short stays, article L312-1 adds that “Tout étranger souhaitant entrer en France en vue d’y séjourner pour une durée n’excédant pas trois mois doit solliciter auprès des autorités diplomatiques et consulaires françaises un visa de court séjour, dans les conditions prévues à l’article 6 du règlement 2016/399 du Parlement européen et du Conseil du 9 mars 2016.” Once ETIAS is live, the valid travel authorisation joins this bundle of required documents for visa-exempt Britons, and its absence grounds a refusal of entry (refus d’entree) under article 14 of the Schengen Borders Code, under which entry is refused, pursuant to article 14 of the Schengen Borders Code as recalled by the Conseil d’Etat, to third-country nationals who fail to meet all the entry conditions of article 6(1) and fall into none of the exempted categories.
The leading French authority on what follows a refusal at the border is the Conseil d’Etat’s decision of 28 June 2019, No. 426666 (full text on Legifrance). Its central holding draws a bright line that still governs every ETIAS-era refusal: a traveller held at the border has not legally entered France, so the removal measures of Book V of the code, including the order to leave French territory, do not apply to such a traveller. In other words, the refused British visitor is not served with an OQTF (obligation de quitter le territoire francais, the order to leave French territory); instead, “La décision prononçant le refus d’entrée peut être exécutée d’office par l’administration”, meaning the administration may enforce return directly. Travellers who insist they cannot be sent back without an OQTF misunderstand their position and waste the short time available for the remedies that actually exist.
Instead, the refused traveller may be placed in a holding area (zone d’attente, the dedicated airport waiting zone for persons denied entry), since “L’étranger qui arrive en France par la voie ferroviaire, maritime ou aérienne et qui n’est pas autorisé à entrer sur le territoire français peut être placé dans une zone d’attente située dans une gare ferroviaire ouverte au trafic international figurant sur une liste définie par voie réglementaire, dans un port ou à proximité du lieu de débarquement ou dans un aéroport, pendant le temps strictement nécessaire à son départ”, under article L341-1 of the CESEDA. Judicial supervision is built in: initial holding is administrative, but extensions beyond the statutory period require the freedoms-and-detention judge (juge des libertes et de la detention, the judicial judge who authorises continued detention), and if holding is not extended, the foreigner is authorised to enter France under a short regularisation visa. The Conseil d’Etat added a refinement worth knowing: merely refusing to board a return flight does not count as entry, though placement in police custody (garde a vue) outside the holding zone can change the analysis. British travellers should therefore comply with lawful directions while immediately activating legal assistance, because resistance without a court order worsens the case without creating any right to enter.
Two related situations deserve brief mention because readers confuse them with ETIAS refusals. Overstaying the 90 days in any 180 days, with or without a valid authorisation, exposes the traveller to removal measures inside France and to future refusals; the mechanics are set out in our guide to Schengen overstays, refusals and OQTF challenges. And carriers that board passengers without the required documents face fines and an obligation to return the traveller, which is why airline staff check ETIAS status in the system before boarding: a refusal notified the night before a flight usually means denied boarding at the gate, not a dramatic scene at the French border.
B. Challenging the decision: appeals, deadlines and the emergency judge
The challenge strategy depends entirely on which authority decided what, and the notification documents dictate the route. Against an ETIAS refusal issued by the French unit, the appeal follows French administrative procedure as indicated in the refusal email; against a refusal issued by another Member State’s unit, that State’s courts have jurisdiction even where France was the destination. Against the border guard’s refusal of entry at a French crossing point, French courts are competent, but the procedure is neither the standard residence-permit litigation nor an OQTF challenge. The refused traveller, or their lawyer, should therefore begin by sorting the papers: the ETIAS email with grounds and competent authority, the written refusal-of-entry form handed at the border, and any holding-area placement decision. Each carries its own deadline, and the shortest governs.
For administrative decisions generally, the background rule is article R421-1 of the Administrative Justice Code: “La juridiction ne peut être saisie que par voie de recours formé contre une décision, et ce, dans les deux mois à partir de la notification ou de la publication de la décision attaquée”. Two months from notification is therefore the default horizon for an action before the administrative tribunal (tribunal administratif, the first-instance administrative court), and it applies unless a special shorter text governs the specific decision. A prior informal appeal (recours gracieux, the request for reconsideration addressed to the authority that decided) or hierarchical appeal (recours hierarchique, the appeal to the authority’s superior) can usefully accompany court action and extends the deadline while the administration re-examines, but it never replaces the court filing where removal is imminent. In ETIAS cases the refusal email itself describes the applicable procedure, and that description should be followed to the letter while the two-month backstop is diarised.
Where liberty is at stake in the holding area, the emergency remedy is the refere-liberte (the urgent application to the administrative judge for protection of a fundamental freedom). Article L521-2 of the Administrative Justice Code provides that “Saisi d’une demande en ce sens justifiée par l’urgence, le juge des référés peut ordonner toutes mesures nécessaires à la sauvegarde d’une liberté fondamentale à laquelle une personne morale de droit public ou un organisme de droit privé chargé de la gestion d’un service public aurait porté, dans l’exercice d’un de ses pouvoirs, une atteinte grave et manifestement illégale”, with a ruling given in a strict short deadline: “Le juge des référés se prononce dans un délai de quarante-huit heures”. Freedom of movement, the right to family life and the right to an effective remedy are the freedoms typically invoked; the applicant must show urgency, a grave and manifestly unlawful interference, and an arguable case on the merits, such as a valid ETIAS wrongly recorded as revoked, a Withdrawal Agreement residence permit ignored by the system, or a refusal form vitiated by missing grounds. The remedy is genuinely fast, but it is not automatic: poorly evidenced applications filed from the holding area without the refusal documents fail, which is why immediate contact with a lawyer and structured collection of the papers matters more than protest.
Finally, travellers already inside France must not confuse the border regime with the interior regime. Once a person has effectively entered, an irregular stay can lead to an OQTF under article L611-1 of the CESEDA, under which “L’autorité administrative peut obliger un étranger à quitter le territoire français lorsqu’il se trouve dans les cas suivants”, including entry without proper documents or presence beyond three months without a permit. That decision, with its associated residence, voluntary-departure and return-ban elements, “peuvent être contestées devant le tribunal administratif”, as article L614-1 states, under short deadlines that depend on the procedure used. The Conseil d’Etat’s 2019 ruling is precisely what keeps these two worlds apart: OQTF for those inside, enforced refusal and holding-area supervision for those stopped at the gate. A British visitor refused at the border who is wrongly served an OQTF, or a lawful resident wrongly treated as a refused visitor, holds a strong annulment argument, but only if the challenge is filed before the right judge within the right time.
Conclusion
The ETIAS story, as it stands on 13 October 2026, is a story of a real future obligation wrapped in present-day fraud. The obligation is real: visa-exempt British travellers will one day need a EUR 20 authorisation obtained only through the official europa.eu channel before travelling to France, and without it they will be refused entry at the border. The fraud is present: with the launch on hold and no applications being collected, every site currently selling an ETIAS authorisation is selling at best an unnecessary intermediation and at worst a deception punishable as fraud, actionable under consumer law and reversible through the banking rules on unauthorised payments. And behind both stands French border law, which gives officers real powers of refusal and holding under judicial supervision, while giving travellers real remedies, from the ETIAS appeal described in the refusal email to the forty-eight-hour emergency judge in the holding area. The practical sequence is therefore simple: apply for nothing until the EU announces a date, pay nothing to unofficial sites, keep every notification email and refusal form, and challenge the correct decision before the correct judge within its deadline. For British residents of France, the position is stronger still: a Withdrawal Agreement residence document replaces ETIAS entirely, and any system or officer that ignores it commits an error the courts can correct.