Indonesia’s electronic Visa on Arrival — the e-VOA most travelers need for Bali, Jakarta, or anywhere else in the country — costs IDR 500,000, which works out to roughly $32 USD. You apply at one site: evisa.imigrasi.go.id, run by the Directorate General of Immigration under Indonesia’s Ministry of Immigration and Corrections. That’s the whole transaction. No agent required, no expedite tier, no reason to pay more.

Plenty of travelers do pay more, sometimes double, sometimes nearly four times the government rate, through third-party portals that surface above the real site in search results. And this year there’s a sharper reason to get the source right: Indonesian immigration quietly rebuilt the login security on its eVisa system after a wave of cloned portals started issuing fake approval PDFs that fail the QR scan at the border. Travel And Tour World reported the mandatory two-factor authentication rollout, and it landed the same stretch of 2026 as a broader “Bali Visa Crackdown” story the outlet also covered — warning tourists about e-visa fraud alongside a separate enforcement push against tourist-visa violations. Two different problems, same season, same underlying message: check where your visa is actually coming from.

Quick Facts — Indonesia e-VOA 2026

Detail	Info
Official portal	evisa.imigrasi.go.id
Official cost	IDR 500,000 (~$32 USD)
Entry type	Single entry
Stay allowed	30 days
Extension	Once, for another 30 days (60 days total), IDR 500,000
Alternative: C1 Visit Visa	Single entry, 60 days, applied for before arrival — a separate, pricier product
Security update	Mandatory OTP two-factor authentication added April 27, 2026
Why it was added	Cloned portals issuing fake approval PDFs that fail QR verification at the border
What third-party sites charge	$75–$120+ observed on active reseller portals
Official domain	Ends in .go.id — Indonesia’s government-only extension

In one sentence: Indonesia’s e-VOA is IDR 500,000 (~$32) at evisa.imigrasi.go.id, and as of April 2026 that portal requires two-factor login after a run of fake-PDF scams tied to cloned sites.

What Is Indonesia’s e-VOA?

The e-VOA — electronic Visa on Arrival — is the standard entry document for tourism, government visits, business meetings, goods purchasing, or transit in Indonesia. It’s single entry, valid for 30 days, and issued exclusively through evisa.imigrasi.go.id. You can apply up to 14 days before travel, though immigration recommends submitting at least 48 hours ahead so there’s time to fix anything that doesn’t match your passport.

The application itself isn’t complicated: passport bio page, a recent photo, arrival details, payment. What trips people up is everything happening around the form — the domain you land on, the price you’re quoted, and now, since April, an extra login step most travelers weren’t expecting.

Every eligible nationality pays the same IDR 500,000 rate. There’s no tiered pricing by passport the way Sri Lanka’s ETA works — one price, one form, one site. That simplicity is exactly what makes a $75 or $120 markup so easy to spot once you know to look for it.

Why Immigration Added Mandatory Two-Factor Authentication in 2026

This isn’t Indonesia’s first run-in with a fake e-VOA site. Back in 2022, immigration publicly warned about a cloned portal mimicking the government’s payment flow, with the then-interim immigration director general telling travelers point-blank that only the official government site issues a valid e-VOA. The portal’s own address has changed since — it now sits at evisa.imigrasi.go.id — but the scam pattern that prompted the warning never really went away.

What’s different in 2026 is the sophistication and the scale. Fraudulent operators are producing fake approval PDFs polished enough to pass a casual look, complete with a QR code — except the code doesn’t resolve to anything in Indonesia’s immigration database. Travelers don’t find out until an officer scans it at the airport, at which point “your visa isn’t real” is not a sentence anyone wants to hear with a boarding pass in hand.

Indonesia’s response: since April 27, 2026, evisa.imigrasi.go.id requires a one-time password sent to your registered email for every login, not just your first account setup. It’s a small friction point — one more code to type in — but it closes the gap that let cloned sites harvest credentials and quietly operate as if they were the real portal. If a site asks you to log in without ever sending you an OTP, that’s already a sign you’re not on evisa.imigrasi.go.id.

The Bali Visa Crackdown Connection

The 2FA rollout didn’t happen in isolation. It landed in the middle of a broader tightening of how Indonesia — and Bali specifically — polices foreign visitors.

On April 15, 2026, Indonesia’s immigration authority launched the Dharma Dewata patrol task force in Denpasar, deploying roughly 100 officers across Bali to check on tourist-visa compliance and public order. By the time it launched, the Bali Immigration Office had already logged 165 deportations and 62 detentions of foreign nationals between January 1 and April 12, 2026 — a run rate immigration officials pointed to as justification for standing up a dedicated unit rather than relying on routine checks. Most of that enforcement targets visa misuse (working on a tourist visa, overstaying, that kind of thing), not document fraud specifically. But it’s the same immigration apparatus, tightening at the same time, and Travel And Tour World’s coverage of the Bali Visa Crackdown explicitly grouped the e-visa fraud warnings alongside the enforcement story — a fair pairing, since both come down to the same instruction: use the real portal, follow the real rules.

If Bali’s part of your trip, this sits next to the Bali tourist levy requirement as a second piece of paperwork worth getting right before you land, not after.

How the Scam Sites Operate

The mechanics track the same playbook running across India, Cambodia, and Vietnam’s eVisa scam ecosystem: buy search ad placement above the government portal for terms like “Indonesia eVisa,” “Bali visa online,” or “Indonesia visa on arrival,” then build a page that mirrors the real application field for field.

The pricing is where it gets messy, because not every third-party site is a straight-up clone. Some are visa assistance agencies that disclose a service fee up front — as of this writing, one such portal listed the eVOA government fee near $35 and totaled $120 once its $85 service charge was added; another listed a comparable “government price” near $29 and charged $75 once its own fee stacked on top. That’s a real, transparent markup, not fraud — but it’s still two to four times what evisa.imigrasi.go.id actually charges for a form that takes fifteen minutes to fill out yourself.

The riskier version is the outright clone: no disclosed fee breakdown, government seals lifted directly from the real site, a payment page that just shows a total with no explanation. Money changes hands, and depending on the operator, you either get a technically valid e-VOA (because they quietly submitted your data to the real portal and pocketed the difference) or you get a PDF that looks right and fails the moment an officer scans the QR code at arrival.

Either way, your passport number, photo, and travel dates passed through a server with zero accountability to Indonesian immigration. That’s the part worth caring about even if the visa itself comes through fine.

How to Apply for Indonesia’s e-VOA

Go directly to evisa.imigrasi.go.id. Type it in — don’t follow a sponsored search result or a link from an email or WhatsApp message. Confirm .go.id sits in the address bar before entering a single passport digit.

1. Create an account at evisa.imigrasi.go.id using a real, accessible email address — this is now where your login OTPs will land, every time you sign in.
2. Select the e-VOA / Visitor Visa category and choose your purpose of visit (tourism covers most travelers).
3. Upload your passport bio page and a recent photo, and enter your details exactly as printed — name, passport number, nationality, expiry date.
4. Enter your arrival details: flight information and intended port of entry.
5. Pay IDR 500,000 (~$32) through the official payment gateway. Card payments may carry a small processing fee from your own bank — that’s normal and separate from any third-party markup.
6. Download the approval PDF once issued and save it offline. The QR code at the bottom is what gets scanned on arrival and later, if you extend.

Apply within the 14-day window before travel, ideally with at least 48 hours of buffer in case something needs correcting.

Extending Your e-VOA

The e-VOA can be extended once, for another 30 days, bringing your total possible stay to 60 days. Extensions run through the same evisa.imigrasi.go.id account — Services → Find Existing Stay Permit → Extend — cost another IDR 500,000, and require a photo taken at a local immigration office within one working day of payment. You can start the process up to 14 days before your current visa expires, and no later than the day before it does. After 60 days, that’s it — you’re expected to leave.

What Does Indonesia’s eVisa Cost in 2026?

How much does the Indonesia e-VOA actually cost? The e-VOA is IDR 500,000 (approximately $32 USD) through the official portal, regardless of nationality, plus any standard card-processing fee from your own bank. A one-time extension costs the same IDR 500,000 again. Anyone charging significantly more than that for the same 30-day single-entry authorization is a third-party markup at best and a fraudulent clone at worst — the official government fee doesn’t change based on which website you land on.

e-VOA vs. C1 Visit Visa: Which Do You Need?

The e-VOA isn’t the only option, and confusing it with the alternative is its own source of overpaying. The C1 Visit Visa is a single-entry visa valid for 60 days — double the e-VOA’s initial window — but it has to be applied for and approved before you travel, not on arrival, and it’s a different (pricier) product entirely. If your trip runs longer than 30 days and you don’t want to deal with an in-country extension, the C1 is worth pricing out directly on the official portal before you assume the e-VOA is your only path. Don’t take a scam site’s word for which one you need — that’s exactly the kind of confusion these operators are built to exploit.

If You’ve Already Paid a Third-Party Site

Check what you actually received. A legitimate Indonesian e-VOA references the Directorate General of Immigration, carries a working QR code, and matches your passport details exactly. If what you have is a receipt from a private company with no government reference number — or a PDF you’re not confident will scan correctly — apply again directly at evisa.imigrasi.go.id before you fly. Don’t find out at the airport.

If you paid and received nothing usable, dispute the charge with your card issuer. Operations like this generally don’t run real customer service, and a chargeback is the practical way to get the money back. This falls into the same category covered in our broader look at travel scams worth planning around — a small paperwork step turning into an avoidable financial hit before the trip even starts.

The Bottom Line

Indonesia’s e-VOA costs IDR 500,000 (~$32), issued only at evisa.imigrasi.go.id. It’s valid 30 days, extendable once to 60. As of April 27, 2026, that portal requires two-factor login — a direct response to cloned sites producing fake approval PDFs that fail QR verification at the border, and a change that landed the same season as a broader immigration crackdown across Bali.

None of that makes the actual process harder. It’s still a fifteen-minute form and a $32 fee. The only real risk is landing on the wrong website first — so type the address yourself, confirm .go.id, and don’t let a search ad talk you into paying double for a form the government already priced fairly.

If Bali’s temples, Yogyakarta’s ancient sites, or the Gili Islands are anywhere on your 2026 list, handle the paperwork now, at the real site, and put the money you save toward the trip instead.

---

Official Indonesia e-VOA portal: evisa.imigrasi.go.id. Two-factor authentication and fraud reporting: Travel And Tour World. Bali Visa Crackdown coverage: Travel And Tour World. Dharma Dewata task force and deportation figures: The Bali Times. Historical fake-portal warning: Coconuts Bali. Information current as of August 2026 — verify current fees and requirements before travel.