Independent · Free · No data stored
entrycardguide·
Anti-scam guide · open source · independent

Every digital arrival card is free. And only one URL per country is real.

We publish the official government URL, explain every field, and show you the scam lookalikes that sit above the real site in Google. No accounts. No stored data. No money from any visa middleman, ever.

COUNTRIES COVERED
7

Thailand · Malaysia · Singapore · Indonesia · Mexico · Dominican · Vietnam

OFFICIAL URLS VERIFIED
15

All in a public TOML file with last_verified dates

SCAM SITES INDEXED
15

DNS-audited monthly; dead domains removed

YOUR DATA WE STORE
0

Validators run client-side. Zero network requests.

§ 01 · The problem

Why this site exists.

In March 2026, Thailand’s Royal Immigration Bureau stated that about 10% of foreign arrivals had paid an unofficial website to submit the TDAC — a form that is, and has always been, free.

That pattern repeats across every country with a digital arrival card. There is one official, free, government-operated URL. There are five to fifteen commercial sites buying ads against searches for that URL, charging USD 20 to 90 to fill an 8-minute form.

We list the real URL. We list the imitators. We explain every field, locally. The whole site is on GitHub, every URL has a last_verified date, and every scam claim has DNS evidence and a first-observed timestamp.

§ 02 · Countries covered

7 countries. 6 free government forms + 1 paid government e-visa. 7 loud official URLs.

Full directory →
§ 03 · Tools

Two ways in, depending on what you know already.

§ 04 · Why trust us

Don't trust the writing. Check the files.

Five independent paths anyone can use to verify every claim on this site.

  1. 01

    Every URL lives in a TOML file with a verification date and an archive link.

    ↪ data/official_urls/{country}.toml
  2. 02

    Every field rule lives in a JSON file with regex, max length, and the exact error text the official site returns.

    ↪ data/rules/{country}.json
  3. 03

    Every scam warning has a domain, a first-observed date, and DNS evidence — dead domains are removed.

    ↪ data/official_urls/*.toml [[scam_sites]]
  4. 04

    The validator runs in your browser. Open DevTools → Network and confirm zero outbound requests with your data.

    ↪ assets/js/validator.ts
  5. 05

    The whole site is on GitHub. Markdown, data, templates, browser code. Bring your own diff.

    ↪ github.com/onlyoasis/entrycardguide

Full methodology →

§ 05 · Recent changes

What we touched this month.

Full changelog →
2026-04-26
Thailand Scam-site DNS audit
2026-04-26
Singapore Initial SGAC coverage published
2026-04-26
Indonesia Initial Indonesia e-CD coverage published
2026-04-26
Vietnam Initial Vietnam e-visa coverage published
2026-04-24
Malaysia Initial MDAC coverage published