iVisa Mobile App Online global travel documents

US expands visa restrictions with new rules for international travelers

Photo of Ra'eesah Manack Ra'eesah Manack
3 min read
Updated on Jul 24, 2026
Summary
  • The key change is: Effective July 23, 2026, the US Department of State can deny or revoke visas for foreign nationals found responsible for or complicit in cyber-enabled crime under Section 212(a)(3)(C) of the Immigration and Nationality Act.
  • Who is affected: The policy may also apply to the immediate family members of designated individuals, even if they were not directly involved in the underlying conduct.
  • What stays the same: Travelers applying for standard tourist, student, business, or work visas with no links to cybercrime face no new forms, fees, or application requirements.
  • Required action: None for the vast majority of international travelers.

The United States has updated its visa restriction policy, but most international travelers will not see any changes when they apply for a US visa. Picture of the White House

Starting July 23, 2026, the US Department of State can deny or cancel visas for foreign nationals connected to cybercrime under Section 212(a)(3) of the Immigration and Nationality Act. The regular visa application process will stay the same for travelers.

US Secretary of State Marco Rubio announced the new policy during a visit to the Philippines to meet with the Association of Southeast Asian Nations. He said:

"The United States is committed to protecting Americans and our international partners from these criminals, who often exploit the most vulnerable."

Who will be affected by the expanded rules?

If you are applying for a US tourist, business, student, exchange, or work visa and have no ties to cybercrime, you do not need to fill out extra forms or meet new visa requirements because of this policy.

The new policy targets foreign nationals the US government suspects of involvement in or benefitting from cybercrimes, including large-scale scams. These restrictions apply worldwide and are not limited to certain countries or nationalities.

The policy also lets the State Department deny or cancel visas for the immediate family members of targeted individuals, even if those relatives were not directly involved in the crime.

Although the announcement targets criminal networks, not regular visitors, it increases the reasons a US visa can be refused. For international travelers, it adds a new reason for ineligibility but does not change the usual application process.

How are the new rules different from the old ones?

Before July 23, 2026, the State Department could refuse visas for criminal, fraud, or national security reasons, but there was no specific policy for people involved in or linked to cybercrime.

The new policy officially expands Section 212(a)(3)© of the Immigration and Nationality Act. This section lets the Secretary of State restrict visas if someone’s entry could seriously harm US foreign policy.

With the expanded policy, consular officers can now legally deny or cancel visas for people suspected of cybercrimes and can also apply these restrictions to their immediate family members.

“We will use all appropriate tools to deter and dismantle cyberscam operations and hold accountable those who profit from victimizing Americans,” explains Rubio.

Why is the US changing its visa restriction policy now?

This announcement comes after Executive Order 14390, which President Donald Trump signed earlier in 2026 to strengthen the US response to cyber fraud and organized online crime.

The State Department says the expanded visa restrictions are meant to disrupt international criminal groups behind cyber scams and sextortion schemes that target people worldwide.

The department also pointed to the growing role of international criminal groups in online investment fraud, resulting in billions of dollars in losses for Americans in 2024.

For regular travelers, the application process remains the same. There are no new forms, extra fees, or added screening for tourists, students, business travelers, or anyone not linked to cybercrime.