Who screens your ETIAS application: Frontex’s role

EU home affairs ministers meeting in Luxembourg on 1 October 2026 were due to discuss a Commission action plan, presented on 29 September, that would substantially expand Frontex, the EU’s border and coast guard agency. A formal proposal for a new mandate is expected on 28 October. Most of the headlines focused on a rapid-reaction force for border crises. But Frontex already has a less-publicised role that will matter directly to every visa-exempt traveller once ETIAS launches: it hosts the ETIAS Central Unit, which checks applications flagged by the automated system.

What is the ETIAS Central Unit?

When the European Travel Information and Authorisation System goes live, all applications will pass through an automated central system run by eu-LISA. That system cross-checks your passport and personal data against a set of EU and Interpol databases automatically. The great majority of applications clear without human involvement.

A small proportion come back with a match, known as a hit. That is when the ETIAS Central Unit steps in. Established within Frontex under Article 7 of Regulation (EU) 2018/1240, the Central Unit operates 24 hours a day, seven days a week, and employs over 200 staff. Its job is to verify applications that triggered a hit in the databases checked and, where needed, forward them to the relevant ETIAS National Unit for a final decision. It also develops the risk indicators and screening rules used to assess applicants, handles data protection requests and audits its own activities.

How does this fit into the wider assessment process?

The ETIAS assessment has two distinct layers. The first is the automated check run by eu-LISA’s central system. Under Article 20 of the regulation, it compares your data with the Schengen Information System (SIS), the Entry/Exit System, the Visa Information System, Eurodac, Europol data, Interpol’s databases of stolen and lost travel documents, and the ETIAS Watchlist, which Europol and member states feed. If nothing flags, the authorisation is issued automatically.

The second layer is human review. Every hit goes first to the Central Unit, which has up to 12 hours to check whether the data really match the applicant. A false hit is deleted and the authorisation issued automatically. If the match is confirmed, or doubts remain, the application goes to the ETIAS National Unit of the member state responsible, which decides. If the applicant answered yes to one of the background questions (a conviction for a listed serious offence, time in a war or conflict zone, or an order to leave an EU country or a return decision) and nothing else flagged, the application goes straight to the National Unit.

How often does a real security flag occur?

Frontex expects about 97% of applications to be approved automatically within minutes, with the remaining 3% reviewed manually by the Central Unit and the National Units. That does not mean 3% of travellers are security risks; many hits will be false matches that a human clears quickly once the details are checked.

For most travellers, the Central Unit is never in the picture. You submit the application, the automated system finds nothing of concern, and the authorisation arrives within minutes. The Central Unit becomes relevant only when a database match raises a question about your application that cannot be resolved automatically.

What does the October Frontex expansion change?

The Commission’s action plan, set out by Migration Commissioner Magnus Brunner on 29 September, focuses on Frontex’s ability to respond to crises at the external border. It follows the Ceuta crossings of 30 and 31 July 2026, when about 72,000 people crossed from Morocco into the Spanish enclave in two days. The plan would let Frontex put officers on a crisis border within 24 hours, but only at a member state’s request, and member states still have to approve the package. Commission President Ursula von der Leyen has previously pledged to triple the agency’s standing corps to 30,000 officers.

Nothing reported so far suggests the mandate proposal will change the ETIAS Central Unit, whose tasks are set in Regulation (EU) 2018/1240. The two run on separate tracks: the Frontex reform is about border crises and returns, while the Central Unit’s work is screening travel authorisation applications.

Can a database hit lead to refusal?

Yes. The databases checked cover lost and stolen travel documents, entry bans, wanted persons, overstays, earlier refusals of entry or visas, and terrorism and serious crime. Some confirmed hits leave no discretion: if your passport is recorded in SIS as lost or stolen, or you are subject to an SIS entry ban, the National Unit must refuse. Other hits are assessed case by case. The overall deadline is 96 hours from submitting a complete application. If you are asked for more information or invited to an interview, the official ETIAS FAQ says this may add up to 30 days.

If you have no history of terrorism, serious crime, overstays, entry bans or removal from the Schengen area, and your passport has not been reported lost or stolen, a hit is not something you are likely to encounter.

What should you do before ETIAS goes live?

Nothing, for now. No action is required yet. Applications are not open. Applications are not open anywhere. Any website claiming to accept ETIAS applications today is not legitimate. The official application portal, when it opens, will be at travel-europe.europa.eu/etias. Press reporting points to 2027 as the likely launch window, though the EU has not announced an official date. An eu-LISA management board meeting is listed for 17–19 November 2026 in Dublin. Current status and next steps are at the ETIAS status page.