TRAVEL SCAM

TSA PreCheck and Global Entry renewal scam: the fake sites charging $140 for a renewal that costs about $59

An email or a top-of-search ".com" warns that your TSA PreCheck or Global Entry is about to expire and rushes you to renew. The site looks official, collects the real government fee plus a bogus service fee, and harvests your passport number, date of birth, and card. Real renewal only ever happens on a .gov site. Here is how to tell them apart before you pay a cent.

SafeBrowz Threat Research Security ResearchJuly 4, 20269 min read

Verdict: a non-.gov site charging a "service fee" to renew TSA PreCheck or Global Entry is a scam

If a website renews your TSA PreCheck or Global Entry for the real government fee plus an added "service," "processing," or "assistance" fee, and it does not sit on a .gov address, it is a scam. These lookalike ".com" sites rank in search and arrive by email, collect the genuine fee so the charge looks right, add $60 to $100 of their own, and pocket your date of birth, passport number, home address, and card details along the way. Legitimate renewal happens only on official government sites: TSA PreCheck through the IDEMIA enrollment portal you reach from tsa.gov, and Global Entry through the Trusted Traveler Program at ttp.dhs.gov. And the government does not refund money you hand to a fraudulent third party. Type the .gov address yourself. Never renew through a link in an email or an ad.

The Brief

Summer is renewal season. Memberships bought in a rush before a big trip five years ago are expiring now, right as families book flights for the July 4 weekend and beyond, and scammers have timed their sites to that surge. The Better Business Bureau's Scam Tracker has logged a steady stream of reports about convincing lookalike websites for TSA PreCheck, Global Entry, and NEXUS renewals, and security researchers at outlets including BleepingComputer and Heimdal have documented the same fake TSA PreCheck sites swindling US travelers. One person told BBB the page "appeared to be an official TSA PreCheck site," asked for everything a real application would, then billed them $140 for a membership that costs far less. The whole trick rests on one thing you can undo in ten seconds: whether you started on a .gov site you typed yourself, or a ".com" you reached from a search result or an email. The rule that beats it is the same one that beats a fake Amazon account-verification email: reach the service by typing its real address, never through the message or ad that came to you.

What the fake renewal site looks like

The lure comes two ways. The first is an email with a subject like "Your TSA PreCheck expires soon, renew now to avoid delays" or "Action required: Global Entry membership expiring." It is styled with official-looking seals and a single "Renew now" button. The second, and sneakier, is search. Type "renew TSA PreCheck" or "Global Entry renewal" into a search engine and the top result may be a paid ad or a slick site that is not the government at all, but a third party that either impersonates the agency outright or offers to "help you with the paperwork."

Either way you land on a page that looks the part. It carries a government-style seal, uses words like "official" and "authorized," and walks you through a form that asks for exactly what the real process asks for, which is what makes it so believable. Full name. Date of birth. Passport number. Home address. Then it asks for a card. In the BBB reports, one victim was prompted to pay $140 for TSA PreCheck, "making it seem I was paying for the TSA fee," and another hit a Global Entry lookalike charging roughly $100 more than the real application fee. That is the model: charge the genuine fee so the amount feels legitimate, then quietly stack a "service fee" on top and keep it. Some of these operators do submit a real application on your behalf, which is worse in a way, because you may actually get PreCheck and never realize you overpaid a middleman who now holds your passport number and card.

The tell is the domain. Real renewal never happens on a ".com." The scam links point to lookalikes such as tsa-precheck-renewal[.]com, global-entry-renew[.]us, precheck-renewal-center[.]com, or ttp-globalentry-renewal[.]org (illustrative examples of the pattern, not real government sites). The words "tsa," "precheck," "global-entry," or "ttp" are glued to "renewal," "renew," or "center," and parked on an ending the government would never use for enrollment, like .com, .us, or .org. If the site is not on a .gov address, no seal, no lock icon, and no polished form makes it official.

🛡 LIVE CHECK

Test that renewal link before you enter anything

Got an email or found a site to renew your TSA PreCheck or Global Entry and not sure it is the real one? Paste the link below before you type your passport number. Our 3-layer engine (Local + APIs + AI) returns a verdict in about 3 seconds. Free, no signup.

Full scan with deep AI analysis → · No URL is logged to your identity.

How real TSA PreCheck and Global Entry renewal actually works

There is a genuine renewal, and it is simple, government-run, and always on a .gov domain. Knowing the real path is the fastest way to recognize the fake one.

TSA PreCheck. You renew through TSA's enrollment provider, IDEMIA. Start at tsa.gov and follow the renewal link, which takes you to the official IDEMIA portal on a government address such as universalenroll.tsa.dhs.gov or tsaenrollmentbyidemia.tsa.dhs.gov. A five-year PreCheck renewal costs about $59 online, or $66.75 in person, and a first-time enrollment is $76.75. There is no separate "service fee" on top. You can renew online as early as six months before your expiration date.

Global Entry. You renew through the Trusted Traveler Program at ttp.dhs.gov, signing in with a login.gov account. The fee is $120 for five years, and you become eligible to renew up to a year before expiration. The program is run by U.S. Customs and Border Protection, and its information pages live at cbp.gov. There is no legitimate ".com" middleman, and no add-on charge.

Two facts protect you here. First, every real step in both programs happens on a .gov address, and the total you pay is the flat government fee, nothing more. Second, and this is the part scammers count on you not knowing: the government does not refund money you paid to a fraudulent third party. TSA and CBP cannot claw back a bogus service fee a fake site charged you, so the only recovery route is disputing it with your card issuer. That is exactly why catching it before you pay matters so much.

The 30-second check: type the .gov address yourself

This one habit beats the whole scam, whether the fake is a flawless clone or a clumsy one, because it never trusts the email or the ad.

Do not click the link in the email or the search ad. Nothing is lost by pausing. Your membership does not vanish the second it expires, and both programs let you renew well before the date.
Type the official address into the address bar yourself. For TSA PreCheck, go to tsa.gov and follow its renewal link. For Global Entry, go to ttp.dhs.gov. Use a bookmark or type it by hand, never a link from a message.
Confirm the domain ends in .gov. Real enrollment sits on government addresses like universalenroll.tsa.dhs.gov and ttp.dhs.gov. A ".com," ".us," or ".org" renewal site, or one with "tsa" or "global-entry" hyphenated into the name, is fake.
Check the price against the real fee. A PreCheck renewal is about $59 online (up to $67 in person), Global Entry is $120. If a site charges more, or lists a separate "service" or "processing" fee on top, you are on a scam.
Never enter your passport number or card on a page you reached from an email or ad. Enter it only inside a session you started by typing the .gov address.

It is the same discipline that beats a fake DMV traffic-ticket text or a fake USPS delivery notice: judge it on the real, official site you open yourself, never on the message that reached out to you.

Red flags that mark a renewal site as a scam

The address is not a .gov. This is the single clearest tell. Real TSA PreCheck and Global Entry renewal only happens on government addresses. A ".com," ".us," or ".org" enrollment site is fake, no matter how official it looks.
A "service," "processing," or "assistance" fee on top of the real fee. The government charges one flat fee and nothing more. Any extra line item is the scammer's cut.
You arrived by email or a search ad. An "expiring soon, renew now" email or a sponsored result at the top of a search is a classic entry point. The real path starts with you typing the .gov address.
Urgency and a deadline. "Renew in 24 hours to keep your benefits." Both programs let you renew months early and keep benefits for a stretch after expiration. Pressure exists to stop you checking.
A total that does not match. A PreCheck renewal is about $59 to $67, Global Entry is $120. A $140 PreCheck charge or a Global Entry price $100 over the real fee is a scam by the numbers alone.
It asks for everything at once. Full name, date of birth, passport number, home address, and card on one convincing form is a data-harvest, whether or not it ever files a real application.
Vague "authorized" or "official" wording. Third-party sites lean on words like "official renewal service" and "government authorized" precisely because they are not the government.

What to do if you already paid or entered your details

Move quickly. The sooner you dispute the charge and lock down your identity, the less the stolen data can do.

Call your bank or card issuer and dispute the charge. Report it as fraud, ask them to reverse the "service fee," and request a new card number. This is your real recovery route, because the government will not refund money paid to a fraudulent third party.
Do the actual renewal on the real .gov site. If you still need PreCheck or Global Entry, renew properly at tsa.gov or ttp.dhs.gov so you are not left unenrolled while you dispute the fake charge.
Watch for identity theft. You may have handed over your passport number, date of birth, and address, which is enough to attempt identity fraud. Consider a free credit freeze with the three bureaus, and monitor your accounts. Start a recovery plan at identitytheft.gov if you see misuse.
Report it to the FTC. File at reportfraud.ftc.gov. This feeds US enforcement and consumer-alert data.
Report it to the FBI Internet Crime Complaint Center at ic3.gov if you lost money, and warn others through BBB Scam Tracker at bbb.org.
Keep the evidence. Save the email, the site URL, and the charge. It helps your bank dispute and any report you file.

How SafeBrowz blocks this threat

SafeBrowz runs a 3-layer detection architecture: Local + APIs + AI.

Layer 1 - Local detection: 60+ URL pattern signatures plus a 550+ brand database plus Cyrillic and Punycode homograph checks, all running inside the extension before the page renders. A government or agency name like "TSA," "PreCheck," or "Global Entry" carried on a non-.gov domain, paired with a payment form and expiry urgency, is exactly the impersonation shape the engine flags. Reading a page's brand and claimed authority against the domain it actually loads on is how it separates a real tsa.gov or ttp.dhs.gov page from a ".com" impostor, and it raises the flag before you fill in the form.
Layer 2 - API checks: aggregates Google Safe Browsing, PhishTank, URLhaus and ScamAdviser feeds plus 30+ scam-TLD lists to flag renewal sites already reported as malicious, which covers many of these lookalikes as travelers report them.
Layer 3 - AI deep scan (Premium): 100+ language content analysis catches brand-new lookalike pages in seconds, including a fresh TSA PreCheck or Global Entry clone that copies the official styling but sits on the wrong domain and asks for a passport number and card behind an added "service fee."

Honest scope: SafeBrowz flags and blocks the fake renewal page before it loads, so the "enter your passport and pay the service fee" step never reaches you. It reads the page you are about to open, not your inbox, so it cannot delete the email itself, and it cannot claw back a fee you already paid on a site you visited without it. Pair the extension with one habit: renew TSA PreCheck and Global Entry only by typing tsa.gov or ttp.dhs.gov yourself, never through an email or ad.

Detection signatures come from threat-intelligence research and our internal brand database, not from user browsing data. SafeBrowz does not store per-user browsing history.

Where browser-layer defense fits

The email or the ad is the lure, but the theft happens on the page. That renewal link is where travelers are pushed to type a passport number, a date of birth, and a card into a counterfeit government form. Browser-layer scanning catches that step. When a TSA- or Global-Entry-styled renewal page renders on a domain that is not a .gov, a brand-aware scanner flags the impersonation before the form is usable. SafeBrowz is a free extension for Chrome, Firefox and Edge, plus a live Android app (Safari coming soon), that checks every URL before it renders against a 550+ brand database. Install SafeBrowz and pair it with the one rule that beats this whole category: reach TSA PreCheck and Global Entry only by typing tsa.gov or ttp.dhs.gov yourself, and never renew through a link in a message or ad. If you want the wider pattern, our guide to spotting fake online stores and checkout pages covers the same domain-first check, and our breakdown of the tax-refund text scam shows how "official" money lures work the same way.

Install SafeBrowz free

Add the browser extension, or the SafeBrowz Android app, that runs every link check in this article automatically, on every page, before it renders. Free forever, with optional Premium AI deep scan at $14.99 per year.

Add to Chrome Add to Firefox Add to Edge Get it on Google Play

See pricing and Premium features

Frequently asked questions

What is the official website to renew TSA PreCheck?

Start at tsa.gov and follow its renewal link, which takes you to TSA's enrollment provider, IDEMIA, on a government address such as universalenroll.tsa.dhs.gov or tsaenrollmentbyidemia.tsa.dhs.gov. Renewal is only ever on a .gov site. A five-year PreCheck renewal is about $59 online or $66.75 in person, with no separate service fee. Any ".com" site charging an added fee to renew PreCheck is a scam.

Where do I renew Global Entry, and how much does it cost?

You renew Global Entry through the Trusted Traveler Program at ttp.dhs.gov, signing in with a login.gov account. It is run by U.S. Customs and Border Protection, with information pages at cbp.gov. The fee is $120 for five years, paid directly to the government with no add-on charge. If a site charges more than $120 or adds a "service" or "processing" fee, it is a fake, not the real Trusted Traveler Program.

Is the "your TSA PreCheck is expiring, renew now" email a scam?

Treat it as one. Real renewal starts with you going to tsa.gov yourself, not with a link in an email or a search ad. A "renew now to avoid delays" message that sends you to a ".com" site, especially one that adds a service fee on top of the real cost or asks for your passport number and card on one form, is phishing. Ignore the link, type tsa.gov yourself, and renew there.

I paid a service fee on one of these sites. Can I get a refund?

Not from the government. TSA and CBP cannot refund money you paid to a fraudulent third party, so your recovery route is your card. Call your bank or card issuer, dispute the charge as fraud, ask to reverse the service fee, and request a new card number. Then renew properly on the real .gov site if you still need the membership, and watch for identity theft, because you likely handed over your passport number, date of birth, and address.

How do I know if a renewal site is the real government one?

Check the domain. Real TSA PreCheck and Global Entry renewal only happens on .gov addresses like universalenroll.tsa.dhs.gov and ttp.dhs.gov. A ".com," ".us," or ".org" site, or one with "tsa" or "global-entry" hyphenated into the name, is fake even if it shows a seal and a lock icon. Then check the price: a PreCheck renewal is about $59 to $67, Global Entry is $120, with no extra service fee. Reach both only by typing the .gov address yourself.

Why are these fake renewal sites so convincing?

Because they copy the real process. They use government-style seals, the words "official" and "authorized," and a form that asks for exactly what a genuine application asks for, so nothing feels off. Many even charge the real fee first, then stack their own service fee on top, which makes the total look plausible. Some actually file a real application on your behalf, so you may get PreCheck and never realize you overpaid a middleman who now holds your passport number and card. The one thing they cannot fake is a .gov domain.

Related SafeBrowz coverage

Bottom line: the TSA PreCheck and Global Entry renewal scam is a fake-website trap that charges the real government fee plus a bogus service fee and harvests your passport, date of birth, and card. Real renewal only ever happens on a .gov site: TSA PreCheck via tsa.gov and IDEMIA, Global Entry via ttp.dhs.gov, at a flat fee with no add-on. And the government will not refund a fee you paid to a fraudulent third party, so catching it before you pay is everything. Put SafeBrowz on your browser so the fake renewal page never loads, and pair it with the habit of renewing only by typing the .gov address yourself.