ETIAS manual review: how the Watchlist check works

Most ETIAS applications will clear automatically within minutes. A smaller share will be held for manual review, sometimes because the applicant’s details match something in the ETIAS Watchlist. That is different from a criminal record flag or a hit on the Schengen Information System. The ETIAS Watchlist is its own list, created specifically for the system, and both Europol and EU member states can add to it. Understanding what it is, who can add to it and what a match actually means can help travellers plan around the possibility of a delay.

What is the ETIAS Watchlist?

Article 34 of Regulation (EU) 2018/1240 established the ETIAS Watchlist as part of the ETIAS Central System. It holds data on people suspected of committing or taking part in a terrorist offence or other serious crime, or where there are factual indications or reasonable grounds to believe they will commit one. Entries can include names, dates of birth, travel document numbers, addresses, email addresses, phone numbers and IP addresses.

Entry on the list does not require a conviction or even a formal charge. Suspicion based on an overall assessment of the person is enough. Europol and member states enter their own data directly, and each is responsible for what it enters. Before adding anything, they must check that the information is adequate, accurate and important enough, weigh how it would affect the share of applications sent for manual review, and check whether it matches an alert already in SIS. If it does, it stays in SIS and does not go on the Watchlist. Entries must be reviewed at least once a year. The list is separate from the Schengen Information System (SIS), which records entry bans, alerts and wanted persons, and separate from the EU criminal records database (ECRIS-TCN). Someone who has no SIS alert and no criminal record could still appear on the ETIAS Watchlist if Europol or a member state has entered data about them.

How does the check work?

When an ETIAS application is submitted, the Central System run by eu-LISA checks it automatically against several databases, including the Watchlist. If there is no match on any of them, the system issues the authorisation without human involvement. That is the outcome for the great majority of applicants.

A potential Watchlist match does not trigger an automatic refusal. First, the ETIAS Central Unit, based at Frontex, checks whether the hit really relates to the applicant. If it does not, the false hit is deleted and the authorisation is issued automatically. If it does, or doubts remain, the application goes to the ETIAS National Unit of the member state responsible for a manual assessment. For a Watchlist hit, that is normally the member state that entered the data. Where Europol entered it, it is the member state of first intended stay. The National Unit, a national authority each member state designates, assesses the security risk and decides whether to issue or refuse.

If the authorisation does not arrive straight away, the official ETIAS FAQ says you will hear within 96 hours whether it has been granted or refused, or whether you need to provide more information. A refusal states the reasons and explains how to appeal.

How long does manual review take?

The Central Unit has up to 12 hours to complete its check. The overall deadline is set in Article 32: a decision within 96 hours of submitting a complete application. A potential match can be a false positive. Names and dates of birth can coincide with entries that relate to different people, and ruling that out is the point of the Central Unit’s check.

Where another member state entered the data, its National Unit is consulted. Where Europol entered it, Europol is consulted. Either has 60 hours to give a reasoned opinion, and no reply counts as a positive opinion. If the National Unit needs more information, the applicant has 10 days to provide it and the decision follows within 96 hours of the reply. The official FAQ says a request for more information or an interview may add up to 30 days. During that time the applicant’s authorisation remains pending. Travelling before the review completes is not possible for countries that require ETIAS at the border.

Under the regulation, a decision can only run past 96 hours if the applicant has been asked for more information or invited to an interview. Being asked is not a refusal, and the decision can still go either way.

How does this differ from the criminal record question?

The application form will include a self-declaration question on criminal history. It covers the 29 serious offence categories listed in the regulation’s annex, over the last 15 years (25 for terrorist offences), the periods set by the 2023 decision that fixes the form’s wording. That question is answered by the applicant. The Watchlist check runs independently of it, against data entered by Europol and member states. Someone with no criminal record to declare could still match a Watchlist entry. Conversely, disclosing a conviction on the form does not produce a Watchlist hit, although a yes answer sends the application for manual review in its own right. The two are separate processes and a match on one does not imply a match on the other.

For more on what the criminal history question covers and which offences are in scope, see the ETIAS criminal record guide.

What should travellers do?

For most people the Watchlist check is invisible. It runs in the background, finds nothing and the authorisation arrives in minutes. The practical implication of knowing it exists is simple: apply well before your departure date. The full ETIAS assessment guide covers the complete range of database checks and explains the timeline from submission to authorisation in more detail.

ETIAS is not live yet. No action is required yet. Applications are not open. Press reporting on EU planning points to a 2027 launch. An eu-LISA management board meeting is listed for 17 to 19 November 2026 in Dublin. For the current official position on timing, see the ETIAS status page.