Every digital arrival card is free. And only one URL per country is real.
We publish the official government URL, explain every field, and show you the scam lookalikes that sit above the real site in Google. No accounts. No stored data. No money from any visa middleman, ever.
Thailand · Malaysia · Singapore · Indonesia · Mexico · Dominican · Vietnam
All in a public TOML file with last_verified dates
DNS-audited monthly; dead domains removed
Validators run client-side. Zero network requests.
Why this site exists.
In March 2026, Thailand’s Royal Immigration Bureau stated that about 10% of foreign arrivals had paid an unofficial website to submit the TDAC — a form that is, and has always been, free.
That pattern repeats across every country with a digital arrival card. There is one official, free, government-operated URL. There are five to fifteen commercial sites buying ads against searches for that URL, charging USD 20 to 90 to fill an 8-minute form.
We list the real URL. We list the imitators. We explain every field, locally. The whole site is on GitHub, every URL has a last_verified date, and every scam claim has DNS evidence and a first-observed timestamp.
7 countries. 6 free government forms + 1 paid government e-visa. 7 loud official URLs.
Two ways in, depending on what you know already.
I don't know what to fill. Decide for me.
Pick your destination. Answer 1–2 questions about how you're entering and your nationality. Get back a card that lists every form you actually need, the official URL, the government fee (if any), and a link to the field-by-field guide.
I just need the official URL. Hand me the link.
The directory. One page you can paste into a forum reply, a chat, or a travel-agent email. Every URL has a last_verified date. Every URL ends in the correct government suffix. None of them is iVisa.
Don't trust the writing. Check the files.
Five independent paths anyone can use to verify every claim on this site.
- 01
Every URL lives in a TOML file with a verification date and an archive link.
↪ data/official_urls/{country}.toml - 02
Every field rule lives in a JSON file with regex, max length, and the exact error text the official site returns.
↪ data/rules/{country}.json - 03
Every scam warning has a domain, a first-observed date, and DNS evidence — dead domains are removed.
↪ data/official_urls/*.toml [[scam_sites]] - 04
The validator runs in your browser. Open DevTools → Network and confirm zero outbound requests with your data.
↪ assets/js/validator.ts - 05
The whole site is on GitHub. Markdown, data, templates, browser code. Bring your own diff.
↪ github.com/onlyoasis/entrycardguide